<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="119">
<package pkgid="98da512bfba549daa887cb481653f3387f2561a7d6686acbafb3067fb50280c4" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="8687efc2f05093d59ab120cf86ecdfcfc218bb5ca4f86b5e5766e7ac1544ac3c" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="f98d25588e41ac90f477edd4f5b46c77fb59508f7d998124f780eee44c113571" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="25d344a883e1c965b412aba01485c6d0ea83d10bf13f183795d108902fd80651" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="b875f637e3a1ae314094a457292bbd411386c33c5ee244e3b935033cd56e8a70" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="3611f30c4ff67205365a0e442e3dc48d35f3cc79abbb3303126ca41104694152" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.0.7" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="aa8e824f53e81f76f5661fb475696fff25a3d61284eef6bc227101e299aab242" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.0.7" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="fb347f2b3dc68c213e654d8ceb2509f9ab6b901bc53b66d012c9c422edaad719" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="a418635c8735d668362c1add632d7fc19da12d2daa93946dd940e992d10f5091" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="d11c5bcd0117ed245f2666fddbcaf565222468a50761808f392e4256538028f6" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="474bfccba2ddb72e57f7e1bb494b0d2a4e441c7ad6351f622ff24f0d1c824fc2" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="26e0a114e9c37b1015499649c35ae8e87cf9c05d03ddb8ce166c581785e208db" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="995b37704ad69bbdcb115d945363c72585dc4ee17247461aa0e7de1f0088ff06" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.51.0" rel="150400.4.7.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
</package>
<package pkgid="b1ce8dadac76af5e2134b276b434ef051ea93cc89e4be7fdf4c338f604735c6f" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="150400.4.7.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
</package>
<package pkgid="7240b970819d6e6a2495834e671478ad8e2d9eb980c495abceefb5fe96c241af" name="db48-utils" arch="aarch64">
  <version epoch="0" ver="4.8.30" rel="150000.7.6.1"/>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
</package>
<package pkgid="bf090c90906276585b37e4b83099001e2af1c589e89e2ae708f848292f69c312" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="150000.7.6.1"/>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
</package>
<package pkgid="ad3c89860ab75732dffe327ecc1edbeee5a387cda3aee2ffbbb6c5ad91def825" name="device-mapper" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="dfb05849eac11a9818726b5519d6d9e2f9e291c6fcfa89fab3f68d5b7147e1b6" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="ed1b51be091fbdf707ae590f9c95ad9f7c18adf3349115755793a6b330ae4431" name="gcc12" arch="src">
  <version epoch="0" ver="12.2.1+git416" rel="150000.1.5.1"/>
  <changelog author="mliska@suse.cz" date="1648468800">- Bump to 9f37d31324f89d0b7b2abac988a976d121ae29c6, git192251.</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit</changelog>
  <changelog author="mliska@suse.cz" date="1649246400">- Bump to 86242eb1bd03eba82d8e22b01b16925d43bcc539, git192423.
  Fixes aarch64 bootstrap issue (PR105144).</changelog>
  <changelog author="schwab@suse.de" date="1649246401">- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607.</changelog>
  <changelog author="rguenther@suse.com" date="1651060800">- Drop no longer necessary gcc12-d-workaround.patch</changelog>
  <changelog author="rguenther@suse.com" date="1651147200">- Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706.
- Switch ppc64le to the IEEE long double ABI by default in Factory.
- Separate ppc64le from ppc/ppc64 specific configury.
- Add _multibuild to gather all .spec files and reduce the number
  of .changes files to one, autogenerated by change_spec.
- Drop %ringdisabled handling.
- Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12
  instead of GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1651233600">- Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9
  * GCC 12.1 release candidate</changelog>
  <changelog author="rguenther@suse.com" date="1651838400">- Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
</package>
<package pkgid="30b347144db3214265605c3055dd67ce156c470fc25df00f2e303377af58f89c" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150400.11.17.1"/>
  <changelog author="msuchanek@suse.com" date="1638964800">- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1639742400">- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch</changelog>
  <changelog author="mchang@suse.com" date="1640088000">- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch</changelog>
  <changelog author="mchang@suse.com" date="1641816000">- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
  * grub2-systemd-sleep-plugin</changelog>
  <changelog author="mchang@suse.com" date="1641902400">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch</changelog>
  <changelog author="mchang@suse.com" date="1642075200">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
  <changelog author="mchang@suse.com" date="1642161600">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
</package>
<package pkgid="fe27a8b16cb9322014abf20410dd75229f8bc1a56ef145049970dd80c9ffd36c" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150400.11.17.1"/>
  <changelog author="msuchanek@suse.com" date="1638964800">- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1639742400">- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch</changelog>
  <changelog author="mchang@suse.com" date="1640088000">- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch</changelog>
  <changelog author="mchang@suse.com" date="1641816000">- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
  * grub2-systemd-sleep-plugin</changelog>
  <changelog author="mchang@suse.com" date="1641902400">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch</changelog>
  <changelog author="mchang@suse.com" date="1642075200">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
  <changelog author="mchang@suse.com" date="1642161600">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
</package>
<package pkgid="e9413525d687cbbeecb90998ef561f6c0af2077fec4f151f09609ea8004107b8" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150400.11.17.1"/>
  <changelog author="msuchanek@suse.com" date="1638964800">- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1639742400">- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch</changelog>
  <changelog author="mchang@suse.com" date="1640088000">- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch</changelog>
  <changelog author="mchang@suse.com" date="1641816000">- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
  * grub2-systemd-sleep-plugin</changelog>
  <changelog author="mchang@suse.com" date="1641902400">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch</changelog>
  <changelog author="mchang@suse.com" date="1642075200">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
  <changelog author="mchang@suse.com" date="1642161600">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
</package>
<package pkgid="27c8a0037e6daddf1a4cd0fe23497394160f72126aaa0a6f35f7fd30515e7f15" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.17.1"/>
  <changelog author="msuchanek@suse.com" date="1638964800">- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1639742400">- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch</changelog>
  <changelog author="mchang@suse.com" date="1640088000">- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch</changelog>
  <changelog author="mchang@suse.com" date="1641816000">- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
  * grub2-systemd-sleep-plugin</changelog>
  <changelog author="mchang@suse.com" date="1641902400">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch</changelog>
  <changelog author="mchang@suse.com" date="1642075200">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
  <changelog author="mchang@suse.com" date="1642161600">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
</package>
<package pkgid="3d5ccc4d1f5ff2ad9a4ac0a1aafef034671420ab9a72928ab108a8fe5a026cf8" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.17.1"/>
  <changelog author="msuchanek@suse.com" date="1638964800">- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1639742400">- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch</changelog>
  <changelog author="mchang@suse.com" date="1640088000">- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch</changelog>
  <changelog author="mchang@suse.com" date="1641816000">- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
  * grub2-systemd-sleep-plugin</changelog>
  <changelog author="mchang@suse.com" date="1641902400">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch</changelog>
  <changelog author="mchang@suse.com" date="1642075200">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
  <changelog author="mchang@suse.com" date="1642161600">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
</package>
<package pkgid="8b69666ab1403f3b393cd01c20d372e2e0cb6f98a7fa4dd9967d3062542082eb" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.17.1"/>
  <changelog author="msuchanek@suse.com" date="1638964800">- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1639742400">- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch</changelog>
  <changelog author="mchang@suse.com" date="1640088000">- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch</changelog>
  <changelog author="mchang@suse.com" date="1641816000">- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
  * grub2-systemd-sleep-plugin</changelog>
  <changelog author="mchang@suse.com" date="1641902400">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch</changelog>
  <changelog author="mchang@suse.com" date="1642075200">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
  <changelog author="mchang@suse.com" date="1642161600">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
</package>
<package pkgid="f16ee7493673888b31f1643e379b22b767efba4f98ed8dd5377c4b1c3b459525" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.17.1"/>
  <changelog author="msuchanek@suse.com" date="1638964800">- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1639742400">- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch</changelog>
  <changelog author="mchang@suse.com" date="1640088000">- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch</changelog>
  <changelog author="mchang@suse.com" date="1641816000">- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
  * grub2-systemd-sleep-plugin</changelog>
  <changelog author="mchang@suse.com" date="1641902400">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch</changelog>
  <changelog author="mchang@suse.com" date="1642075200">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
  <changelog author="mchang@suse.com" date="1642161600">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
</package>
<package pkgid="cc3e06c409a85c3ca2faac447ad568f392078c7fd32ad1180e69e43191d8aac8" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.17.1"/>
  <changelog author="msuchanek@suse.com" date="1638964800">- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1639742400">- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch</changelog>
  <changelog author="mchang@suse.com" date="1640088000">- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch</changelog>
  <changelog author="mchang@suse.com" date="1641816000">- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
  * grub2-systemd-sleep-plugin</changelog>
  <changelog author="mchang@suse.com" date="1641902400">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch</changelog>
  <changelog author="mchang@suse.com" date="1642075200">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
  <changelog author="mchang@suse.com" date="1642161600">- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
</package>
<package pkgid="988fc34140db1874f8a042cd505110a582d240135dbdfc05aaafba49fdac238c" name="ipset" arch="aarch64">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="a5c090849b11a1940f334dbe30e449a57e32e725e4e709ca664c053e2addd74b" name="ipset" arch="ppc64le">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="61077855e7d725827e6977fd98390291a46822d2ef60be40ee3b2f845a9fd88c" name="ipset" arch="s390x">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="c648e01ee27f3bbb2933a4ab7aa01ff9949900482242d403ad33429cd25b97fd" name="ipset" arch="src">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="d28a5ba3e572d97557b159e154c8342d5afe9e4c0310c9b9b1a4bfc0201c8c40" name="ipset" arch="x86_64">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="fe718adf9a62afda1a99109bdcbf8b60f742fcb52284d1187d15798b853ae4d9" name="iputils" arch="aarch64">
  <version epoch="0" ver="20211215" rel="150400.3.3.2"/>
  <changelog author="pvorel@suse.cz" date="1558699200">- Update to version s20190515 (includes changes s20190324)
  * s20190324: 189 commits since s20180629 that include changing build
    system from autotools to meson, added rarpd and rdisc systemd service
    files, many fixes
  * s20190515 bugfix release (6 commits)
- User visible change: arping and clockdiff are moved from /usr/sbin
  to /usr/bin (respect upstream path)
- Backport patch 0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
  (fixing build system)
- Add workaround patch meson-remove-setcap-setuid.sh.patch
- Remove 0001-tracepath-Fix-copying-input-IPv6-address.patch
  (included in s20190324 release)
- Refresh old patches (iputils-ping-interrupt.diff, iputils-sec-ping-unblock.diff)
- Changes caused by upstream switching to meson build system (drop sed build dependency)
- Added locales
- Fix typos</changelog>
  <changelog author="pvorel@suse.cz" date="1560513600">- Add patch ping-Fix-unwanted-bell-on-unreachable-address.patch (boo#1135118)</changelog>
  <changelog author="pvorel@suse.cz" date="1562760000">- Update to version s20190709
- Removed patches included in this upstream release:
  ping-Fix-unwanted-bell-on-unreachable-address.patch
  0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
  meson-remove-setcap-setuid.sh.patch
- Add libcap-progs as a build dependency (setcap is needed)</changelog>
  <changelog author="pvorel@suse.cz" date="1564142400">- Set caps for clockdiff (boo#1140994), based on change in permissions package
  https://github.com/openSUSE/permissions/commit/5da6a81e38bb74f2090d73208b1a0101a0c5b73b
- With new permissions package both clockdiff and ping have capabilities
  cap_net_raw+p instead of cap_net_raw+ep (boo#1140993), also ping6 does not
  try to set permissions on links (boo#1140991)
- Pass -DNO_SETCAP_OR_SUID=true (don't run setcap via distro script
  build-aux/setcap-setuid.sh, we set capabilities with rpm)</changelog>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1667908800">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
</package>
<package pkgid="f48090f67359bad646f557416e6f8cbbb261a60c24f4a3b959b799d678acc935" name="iputils" arch="src">
  <version epoch="0" ver="20211215" rel="150400.3.3.2"/>
  <changelog author="pvorel@suse.cz" date="1558699200">- Update to version s20190515 (includes changes s20190324)
  * s20190324: 189 commits since s20180629 that include changing build
    system from autotools to meson, added rarpd and rdisc systemd service
    files, many fixes
  * s20190515 bugfix release (6 commits)
- User visible change: arping and clockdiff are moved from /usr/sbin
  to /usr/bin (respect upstream path)
- Backport patch 0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
  (fixing build system)
- Add workaround patch meson-remove-setcap-setuid.sh.patch
- Remove 0001-tracepath-Fix-copying-input-IPv6-address.patch
  (included in s20190324 release)
- Refresh old patches (iputils-ping-interrupt.diff, iputils-sec-ping-unblock.diff)
- Changes caused by upstream switching to meson build system (drop sed build dependency)
- Added locales
- Fix typos</changelog>
  <changelog author="pvorel@suse.cz" date="1560513600">- Add patch ping-Fix-unwanted-bell-on-unreachable-address.patch (boo#1135118)</changelog>
  <changelog author="pvorel@suse.cz" date="1562760000">- Update to version s20190709
- Removed patches included in this upstream release:
  ping-Fix-unwanted-bell-on-unreachable-address.patch
  0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
  meson-remove-setcap-setuid.sh.patch
- Add libcap-progs as a build dependency (setcap is needed)</changelog>
  <changelog author="pvorel@suse.cz" date="1564142400">- Set caps for clockdiff (boo#1140994), based on change in permissions package
  https://github.com/openSUSE/permissions/commit/5da6a81e38bb74f2090d73208b1a0101a0c5b73b
- With new permissions package both clockdiff and ping have capabilities
  cap_net_raw+p instead of cap_net_raw+ep (boo#1140993), also ping6 does not
  try to set permissions on links (boo#1140991)
- Pass -DNO_SETCAP_OR_SUID=true (don't run setcap via distro script
  build-aux/setcap-setuid.sh, we set capabilities with rpm)</changelog>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1667908800">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
</package>
<package pkgid="eabc9bc884f6357154cc5b85093611776ecf75aa98619e19b4b30a951bbb3356" name="iputils" arch="x86_64">
  <version epoch="0" ver="20211215" rel="150400.3.3.2"/>
  <changelog author="pvorel@suse.cz" date="1558699200">- Update to version s20190515 (includes changes s20190324)
  * s20190324: 189 commits since s20180629 that include changing build
    system from autotools to meson, added rarpd and rdisc systemd service
    files, many fixes
  * s20190515 bugfix release (6 commits)
- User visible change: arping and clockdiff are moved from /usr/sbin
  to /usr/bin (respect upstream path)
- Backport patch 0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
  (fixing build system)
- Add workaround patch meson-remove-setcap-setuid.sh.patch
- Remove 0001-tracepath-Fix-copying-input-IPv6-address.patch
  (included in s20190324 release)
- Refresh old patches (iputils-ping-interrupt.diff, iputils-sec-ping-unblock.diff)
- Changes caused by upstream switching to meson build system (drop sed build dependency)
- Added locales
- Fix typos</changelog>
  <changelog author="pvorel@suse.cz" date="1560513600">- Add patch ping-Fix-unwanted-bell-on-unreachable-address.patch (boo#1135118)</changelog>
  <changelog author="pvorel@suse.cz" date="1562760000">- Update to version s20190709
- Removed patches included in this upstream release:
  ping-Fix-unwanted-bell-on-unreachable-address.patch
  0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
  meson-remove-setcap-setuid.sh.patch
- Add libcap-progs as a build dependency (setcap is needed)</changelog>
  <changelog author="pvorel@suse.cz" date="1564142400">- Set caps for clockdiff (boo#1140994), based on change in permissions package
  https://github.com/openSUSE/permissions/commit/5da6a81e38bb74f2090d73208b1a0101a0c5b73b
- With new permissions package both clockdiff and ping have capabilities
  cap_net_raw+p instead of cap_net_raw+ep (boo#1140993), also ping6 does not
  try to set permissions on links (boo#1140991)
- Pass -DNO_SETCAP_OR_SUID=true (don't run setcap via distro script
  build-aux/setcap-setuid.sh, we set capabilities with rpm)</changelog>
  <changelog author="mwilck@suse.com" date="1566302400">- Fix arping -D problem (bsc#1146440)
  * added arping-revert-partially-fix-sent-vs-received-package.patch
  (upstream commit 18f14be)</changelog>
  <changelog author="pvorel@suse.cz" date="1567771200">- Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
  * added arping-fix-f-quit-on-first-reply-regression.patch
  (upstream commit 1df5350)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1667908800">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
</package>
<package pkgid="bf9ef4335d2dedfcfab6d1e3d3e6994c7a721681536fa2e3707060a6e84be8b7" name="krb5" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="150400.3.3.1"/>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
</package>
<package pkgid="d6d3c75a19141a9b81634aa976be324d2b35a2f78eab1b97f3aa0dbad47a73de" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="150400.3.3.1"/>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
</package>
<package pkgid="9e27ade554445de3059f4c674fb49607d5560e210275902dc5896cc4fd3d0b0b" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="150400.3.3.1"/>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
</package>
<package pkgid="7e55e4ff1af6f42efd049b0332a743a4e427a632b38c75865dd5af6e23f0e955" name="kubevirt" arch="src">
  <version epoch="0" ver="0.54.0" rel="150400.3.7.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1620302400">- Install virt-launcher SELinux policy (bsc#1185714)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621252800">- Do not package OLM manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1624968000">- Add REGISTRY variable
- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
</package>
<package pkgid="5f5c2bc4ebd810de1a8d88dec02a94da06b8784e06e97c6c405609dfd80eacd5" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.7.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1620302400">- Install virt-launcher SELinux policy (bsc#1185714)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621252800">- Do not package OLM manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1624968000">- Add REGISTRY variable
- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
</package>
<package pkgid="9fcbba1de4098f76a03fca0180474212073b60f4f679be142cf28165cfac6e5b" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.7.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1620302400">- Install virt-launcher SELinux policy (bsc#1185714)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621252800">- Do not package OLM manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1624968000">- Add REGISTRY variable
- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
</package>
<package pkgid="21a9cd390e7d63d6bda78a2cbaed181a084c6d074add2da51e1aa77fe2279d0d" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.1" rel="150400.3.12.1"/>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
</package>
<package pkgid="a9b9124fcf521f00826b6421f4cc6c7628777985ac88531629c0de2df3e51aa1" name="libarchive13" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.12.1"/>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
</package>
<package pkgid="117fce5a88c81616e7ca8a8280e3f26a41a48ef2234c6bbb4a0aa3ca240148c0" name="libarchive13" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.12.1"/>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
</package>
<package pkgid="81e68887bc334333eaa6af397987ea95316a5e0dfaea3be90e2eff82c4103526" name="libdb-4_8" arch="aarch64">
  <version epoch="0" ver="4.8.30" rel="150000.7.6.1"/>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
</package>
<package pkgid="0205fdee7a070af95ec9eb98b2d58f06d97d515494a91fe0d1a5d5d4e2e1d2bf" name="libdb-4_8" arch="src">
  <version epoch="0" ver="4.8.30" rel="150000.7.6.1"/>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libdb-devel to baselibs</changelog>
  <changelog author="prusnak@opensuse.org" date="1317124800">- enable C++ bindings
- spec cleanup</changelog>
  <changelog author="adrian@suse.de" date="1317211200">- fix arm build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1324555200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Do not use build date as version string.</changelog>
  <changelog author="ro@suse.de" date="1353153600">- fix check-build.sh for kernel &gt; 3.0</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Rename db_ binaries to db48_ to make room for libdb-6_0
- Add conflict markers against libdb-4_5 (overlapping files)</changelog>
  <changelog author="werner@suse.de" date="1371556800">- Try to change baselibs.conf to fit coolo's comment hopefully</changelog>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
</package>
<package pkgid="bdef2597cd89294d01d6e03ca0baa1eea8cd4349290753917ffe4a9ec55c5d79" name="libdb-4_8" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="150000.7.6.1"/>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
</package>
<package pkgid="5564fcc36c1d0a1e10957b26d43cdb828976c093c9015c54bbab75996b0fbfe1" name="libdevmapper-event1_03" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="187799e781e3274db06c4c0ebcf19a9f2e6b73e010b470ea2f28d39d8905c400" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="d852f02adfaa7947a6ece6f51a514bc8a70c1a1d7078cb914c55042bc2c5376d" name="libdevmapper1_03" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="e83e851629b18493c6dc5d2463d0b1c2ae45ff708434439129b30784e6bc027e" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="73e6dac3ac8dfa163a8b4a3c283fd7e28c824cdbe7d8011f046fbe3e72d19405" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="12.2.1+git416" rel="150000.1.5.1"/>
  <changelog author="mliska@suse.cz" date="1648468800">- Bump to 9f37d31324f89d0b7b2abac988a976d121ae29c6, git192251.</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit</changelog>
  <changelog author="mliska@suse.cz" date="1649246400">- Bump to 86242eb1bd03eba82d8e22b01b16925d43bcc539, git192423.
  Fixes aarch64 bootstrap issue (PR105144).</changelog>
  <changelog author="schwab@suse.de" date="1649246401">- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607.</changelog>
  <changelog author="rguenther@suse.com" date="1651060800">- Drop no longer necessary gcc12-d-workaround.patch</changelog>
  <changelog author="rguenther@suse.com" date="1651147200">- Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706.
- Switch ppc64le to the IEEE long double ABI by default in Factory.
- Separate ppc64le from ppc/ppc64 specific configury.
- Add _multibuild to gather all .spec files and reduce the number
  of .changes files to one, autogenerated by change_spec.
- Drop %ringdisabled handling.
- Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12
  instead of GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1651233600">- Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9
  * GCC 12.1 release candidate</changelog>
  <changelog author="rguenther@suse.com" date="1651838400">- Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
</package>
<package pkgid="1263d90280698c7d15339543715c564b6cff3af739533dcb4991ca48815f18e3" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="12.2.1+git416" rel="150000.1.5.1"/>
  <changelog author="mliska@suse.cz" date="1648468800">- Bump to 9f37d31324f89d0b7b2abac988a976d121ae29c6, git192251.</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit</changelog>
  <changelog author="mliska@suse.cz" date="1649246400">- Bump to 86242eb1bd03eba82d8e22b01b16925d43bcc539, git192423.
  Fixes aarch64 bootstrap issue (PR105144).</changelog>
  <changelog author="schwab@suse.de" date="1649246401">- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607.</changelog>
  <changelog author="rguenther@suse.com" date="1651060800">- Drop no longer necessary gcc12-d-workaround.patch</changelog>
  <changelog author="rguenther@suse.com" date="1651147200">- Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706.
- Switch ppc64le to the IEEE long double ABI by default in Factory.
- Separate ppc64le from ppc/ppc64 specific configury.
- Add _multibuild to gather all .spec files and reduce the number
  of .changes files to one, autogenerated by change_spec.
- Drop %ringdisabled handling.
- Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12
  instead of GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1651233600">- Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9
  * GCC 12.1 release candidate</changelog>
  <changelog author="rguenther@suse.com" date="1651838400">- Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
</package>
<package pkgid="a3a47a20a842f58055be7acf38572df4d358d17fdb6b50e975c5bd37d309f875" name="libipset13" arch="aarch64">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="8d05373170679c857e50231b71934d1e6bed90a3e079b4b6e332df728f2cc267" name="libipset13" arch="ppc64le">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="0b4c68e7428ec6b6906e5fd226ddd88cc376b38dd42ac7047925e34b62e486e2" name="libipset13" arch="s390x">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="029b74c68132892b0916a52bd50f8197ace0dadcf1ec99f023cb5186ed9a1e5e" name="libipset13" arch="x86_64">
  <version epoch="0" ver="7.15" rel="150400.12.3.2"/>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
</package>
<package pkgid="81d648910ea9b9b8854454c1b2f084e3a37716b406801378b1004e4ecdd5b495" name="liblvm2cmd2_03" arch="aarch64">
  <version epoch="0" ver="2.03.05" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="f2eff6f089c18dd6c034d19c1ed2754abf747cd244e087ab14556aa4b26f418d" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="ceb7bc65a22fe49a918f622d528452b191e99d1ddefd9bfe9274bc38a4d7f90e" name="libnvme" arch="src">
  <version epoch="0" ver="1.0" rel="150400.3.9.3"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
</package>
<package pkgid="ba033494e03378e7c57c2b78dea66ba304036d3829ba2b3a44bc1bd9ee7a2714" name="libnvme1" arch="aarch64">
  <version epoch="0" ver="1.0" rel="150400.3.9.3"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
</package>
<package pkgid="019dd9bd021d212a14bfc7e707de8deca64c0cd7f150e26358f5b27623110071" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.0" rel="150400.3.9.3"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
</package>
<package pkgid="57ecd2264f02994072b50b71a16fd9298003d77b03c5fff949b2923cda561837" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="c171d7a5a1d23d224217a9f029dd36f4cc66598d51c81c3a3eb0fb8461f6eaa5" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="fcaaaeaa0dec3862db3551d346f3f9810dba81f86cbdbe78d23e43da6242f3cb" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="0e88397b3373873570918e91a709f7d6b5b6cc1cdd214504d06e13c7d4b8c244" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="d3230b3439341e7b8dfa8da3f7cfc4bb9e228d22ca96276e589ac11a901371b1" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="6a24b9c18c5d336713a6b1da1f9f4f1d572b02e84723c429d0229597f5903333" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="d3bc0ae0a7767bd8805e80b98cb5b9c95cb1afc56dc1d38223edf2f215114775" name="libpixman-1-0" arch="aarch64">
  <version epoch="0" ver="0.40.0" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1440244800">- Update to version 0.33.2:
  + ARMv6 - Many fast paths implementations were added.
  + PPC64/PPC64LE - Fix all outstanding bugs and add many fast
    paths implementations using vmx.
  + Major enhancements to lowlevel-blt-bench utility.
  + A couple of fixes and enhancements to mmx code.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445947200">- Update to version 0.33.4:
  + Important security fix to prevent stack buffer overflow.
  + POWER: New fast-paths and optimizations to existing fast-paths.
  + ARMv6: New fast-path.
  + Tests: New cover and fence-image-self tests.
  + Remove redundant corrections in various calculations for
    COVER-CLIP and COVER analysis.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 0.33.6:
  + configura.ac: fix test for SSE2 &amp; SSSE3 assembler support.
  + mmx: Improve detection of support for "K" constraint.
  + Revert "mmx: Use MMX2 intrinsics from xmmintrin.h directly".</changelog>
  <changelog author="zaitor@opensuse.org" date="1454328000">- Update to version 0.34.0:
  + No changes from last version, stable version release only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459771200">- Add pixman-private-correct-include.patch: pixman-private: include
  &lt;float.h&gt; only in C code, patch from upstream git.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="mvetter@suse.com" date="1542974400">- Update to version 0.36.0:
  + Add tests for (a)rgb floating point formats
  + Add support for argb/xrgb float formats, v5
  + Fix stride calculation in stress-test
  + Adjust for clang's removal of __builtin_shuffle
  + Fix vector loads on ppc64le
  + Promote unsigned short to unsigned int explicitly
  + pixman-filter: Made Gaussian a bit wider
  + pixman-filter: Nested polynomial for cubic
  + pixman-filter: Fix several issues related to normalization
  + pixman-filter: Speed up BOX/BOX filter
  + pixman-filter: integral splitting is only needed for triangle
    filterdd
  + pixman-filter: Correct Simpsons integration
  + pixman-filter: reduce amount of malloc/free/memcpy to generate
    filter
  + pixman-image: Added enable-gnuplot config to view filters in
    gnuplot
  + pixman-fast-path.c: Pick NEAREST affine fast paths before
    BILINEAR ones
  + pixman-private: include &lt;float.h&gt; only in C code
- Remove pixman-private-correct-include.patch: upstreamed</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- Update to versio 0.40.0:
  + Meson build system improvements
  + Supporting optimizations on Hygon Dhyana processors
    to match what is enabled for Intel/AMD CPUs.
  + A few Loongson fixes/improvements.
  + Lots of other fixes</changelog>
  <changelog author="mgorse@suse.com" date="1667563200">- Add pixman-CVE-2022-44638.patch: avoid an integer overflow
  (boo#1205033 CVE-2022-44638).</changelog>
</package>
<package pkgid="db6dd4d79d4f5f9bd6611b243466d68e58d452c65d23a2c255d8502c4ff8a245" name="libpixman-1-0" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1440244800">- Update to version 0.33.2:
  + ARMv6 - Many fast paths implementations were added.
  + PPC64/PPC64LE - Fix all outstanding bugs and add many fast
    paths implementations using vmx.
  + Major enhancements to lowlevel-blt-bench utility.
  + A couple of fixes and enhancements to mmx code.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445947200">- Update to version 0.33.4:
  + Important security fix to prevent stack buffer overflow.
  + POWER: New fast-paths and optimizations to existing fast-paths.
  + ARMv6: New fast-path.
  + Tests: New cover and fence-image-self tests.
  + Remove redundant corrections in various calculations for
    COVER-CLIP and COVER analysis.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 0.33.6:
  + configura.ac: fix test for SSE2 &amp; SSSE3 assembler support.
  + mmx: Improve detection of support for "K" constraint.
  + Revert "mmx: Use MMX2 intrinsics from xmmintrin.h directly".</changelog>
  <changelog author="zaitor@opensuse.org" date="1454328000">- Update to version 0.34.0:
  + No changes from last version, stable version release only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459771200">- Add pixman-private-correct-include.patch: pixman-private: include
  &lt;float.h&gt; only in C code, patch from upstream git.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="mvetter@suse.com" date="1542974400">- Update to version 0.36.0:
  + Add tests for (a)rgb floating point formats
  + Add support for argb/xrgb float formats, v5
  + Fix stride calculation in stress-test
  + Adjust for clang's removal of __builtin_shuffle
  + Fix vector loads on ppc64le
  + Promote unsigned short to unsigned int explicitly
  + pixman-filter: Made Gaussian a bit wider
  + pixman-filter: Nested polynomial for cubic
  + pixman-filter: Fix several issues related to normalization
  + pixman-filter: Speed up BOX/BOX filter
  + pixman-filter: integral splitting is only needed for triangle
    filterdd
  + pixman-filter: Correct Simpsons integration
  + pixman-filter: reduce amount of malloc/free/memcpy to generate
    filter
  + pixman-image: Added enable-gnuplot config to view filters in
    gnuplot
  + pixman-fast-path.c: Pick NEAREST affine fast paths before
    BILINEAR ones
  + pixman-private: include &lt;float.h&gt; only in C code
- Remove pixman-private-correct-include.patch: upstreamed</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- Update to versio 0.40.0:
  + Meson build system improvements
  + Supporting optimizations on Hygon Dhyana processors
    to match what is enabled for Intel/AMD CPUs.
  + A few Loongson fixes/improvements.
  + Lots of other fixes</changelog>
  <changelog author="mgorse@suse.com" date="1667563200">- Add pixman-CVE-2022-44638.patch: avoid an integer overflow
  (boo#1205033 CVE-2022-44638).</changelog>
</package>
<package pkgid="49902fcb5e9f25f24df32042872e6b6e98bfbf7a299de05a77aec1650023bc36" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.37.2"/>
  <changelog author="mcepl@suse.com" date="1631707200">- Update to 3.6.15:
  - bpo-43124: Made the internal putcmd function in smtplib
    sanitize input for presence of \r and \n characters to avoid
    (unlikely) command injection. Library
  - bpo-45001: Made email date parsing more robust against
    malformed input, namely a whitespace-only Date: header. Patch
    by Wouter Bolsterlee. Tests
  - bpo-38965: Fix test_faulthandler on GCC 10. Use the
    ?volatile? keyword in faulthandler._stack_overflow() to
    prevent tail call optimization on any compiler, rather than
    relying on compiler specific pragma.
- Remove upstreamed patches:
  - faulthandler_stack_overflow_on_GCC10.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
</package>
<package pkgid="2749258afbcbadc7f896d6a46ed3481034b6e9df19264462f8749e2337c1a886" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.37.2"/>
  <changelog author="mcepl@suse.com" date="1631707200">- Update to 3.6.15:
  - bpo-43124: Made the internal putcmd function in smtplib
    sanitize input for presence of \r and \n characters to avoid
    (unlikely) command injection. Library
  - bpo-45001: Made email date parsing more robust against
    malformed input, namely a whitespace-only Date: header. Patch
    by Wouter Bolsterlee. Tests
  - bpo-38965: Fix test_faulthandler on GCC 10. Use the
    ?volatile? keyword in faulthandler._stack_overflow() to
    prevent tail call optimization on any compiler, rather than
    relying on compiler specific pragma.
- Remove upstreamed patches:
  - faulthandler_stack_overflow_on_GCC10.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
</package>
<package pkgid="18595e81cfb9405bbecc25003bb613a45f004daf3718de179b69ee6ebb86f19f" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="12.2.1+git416" rel="150000.1.5.1"/>
  <changelog author="mliska@suse.cz" date="1648468800">- Bump to 9f37d31324f89d0b7b2abac988a976d121ae29c6, git192251.</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit</changelog>
  <changelog author="mliska@suse.cz" date="1649246400">- Bump to 86242eb1bd03eba82d8e22b01b16925d43bcc539, git192423.
  Fixes aarch64 bootstrap issue (PR105144).</changelog>
  <changelog author="schwab@suse.de" date="1649246401">- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607.</changelog>
  <changelog author="rguenther@suse.com" date="1651060800">- Drop no longer necessary gcc12-d-workaround.patch</changelog>
  <changelog author="rguenther@suse.com" date="1651147200">- Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706.
- Switch ppc64le to the IEEE long double ABI by default in Factory.
- Separate ppc64le from ppc/ppc64 specific configury.
- Add _multibuild to gather all .spec files and reduce the number
  of .changes files to one, autogenerated by change_spec.
- Drop %ringdisabled handling.
- Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12
  instead of GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1651233600">- Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9
  * GCC 12.1 release candidate</changelog>
  <changelog author="rguenther@suse.com" date="1651838400">- Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
</package>
<package pkgid="197c563089dffd20d5b42ea8272f3f8ee5ebcad40de443745061607ba236e355" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="12.2.1+git416" rel="150000.1.5.1"/>
  <changelog author="mliska@suse.cz" date="1648468800">- Bump to 9f37d31324f89d0b7b2abac988a976d121ae29c6, git192251.</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit</changelog>
  <changelog author="mliska@suse.cz" date="1649246400">- Bump to 86242eb1bd03eba82d8e22b01b16925d43bcc539, git192423.
  Fixes aarch64 bootstrap issue (PR105144).</changelog>
  <changelog author="schwab@suse.de" date="1649246401">- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1650369600">- Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607.</changelog>
  <changelog author="rguenther@suse.com" date="1651060800">- Drop no longer necessary gcc12-d-workaround.patch</changelog>
  <changelog author="rguenther@suse.com" date="1651147200">- Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706.
- Switch ppc64le to the IEEE long double ABI by default in Factory.
- Separate ppc64le from ppc/ppc64 specific configury.
- Add _multibuild to gather all .spec files and reduce the number
  of .changes files to one, autogenerated by change_spec.
- Drop %ringdisabled handling.
- Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12
  instead of GCC 4.8.</changelog>
  <changelog author="rguenther@suse.com" date="1651233600">- Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9
  * GCC 12.1 release candidate</changelog>
  <changelog author="rguenther@suse.com" date="1651838400">- Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
</package>
<package pkgid="29b6e4d3fb850f1a0a3a441a81ca49efa270fd9aafa4b3077ddd0f2c92d6b51a" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.19.1"/>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
</package>
<package pkgid="15ca697a53b40d8403ecd6f1230ddea99163f4acbf072d17cb1e17fcc2e5ff0b" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.19.1"/>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
</package>
<package pkgid="80e694c9dcc8f03f9b1a2c64effae79ce04c43f43d8a9b875d60dbee4297ab1f" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.1.0" rel="150300.21.2"/>
  <changelog author="kallan@suse.com" date="1583496000">- Update to 11.0.5 (build 15389592) (boo#1165955)
  + DNS server is reported incorrectly as '127.0.0.53' when using
    systemd-resolved. DNS server is reported incorrectly in GuestInfo as
    '127.0.0.53' , when the OS uses systemd-resolved. This issue is fixed
    in this release.
- Conditionalized the use of systemd_ordering.  Use systemd_ordering
  for factory, openSUSE &gt;= 15, and SLE &gt;= 15.  Use systemd_requires
  for older openSUSE and SLE releases.
- Conditionalize out the use of %license COPYING for SLE 12 SP2 and older.
- Added patches
  + gcc10-warning.patch (boo#1160408)
  + diskinfo-debug-logging-1162435.patch (boo#1162435 and bsc#1162119)
  - Changed g_warning to g_debug
  + app_info_plugin.patch (boo#1165955)
- Drop unnecessary patch:
  - fix-leaks-Aliases-MappedAliases.patch</changelog>
  <changelog author="kallan@suse.com" date="1583755200">- Simplified the conditional around systemd_ordering to just use
  suse_version &gt;= 1500.</changelog>
  <changelog author="kallan@suse.com" date="1589544000">- Update to 11.1.0 (build 16036546) (boo#1171764, boo#1171765)
  + open-vm-tools 11.1.0 includes a new 'Service Discovery' plugin, which
    connects with the vRealize Operations Manager product.  For more
    information and details on configuring this plugin, refer to Configuring
    Service Discovery.
  + In this release, a new tools.conf switch is added to enable and disable
    the guest customization in the guest virtual machine. By default, the
    guest customization is enabled. For more details, refer KB 78903.
- Spec file changes to remove the is_opensuse macros where possible.
- Remoed the mv vm-support line from the spec file.  vm-support is now
  automatically placed in the /usr/bin directory.
- Added version number to Requires: libxmlsec1-openssl1 to help with vgauth
  version checking.
- Added patches
  + pam-vmtoolsd.patch (boo#1171003)
- Drop unnecessary patch:
  - app_info_plugin.patch
  - diskinfo-debug-logging-1162435.patch
  - gcc9-static-inline.patch</changelog>
  <changelog author="kallan@suse.com" date="1590667200">- While updating to 11.1.0 (build 16036546) (boo#1171764) hold off on
  producing the open-vm-tools-sdmp (boo#1171765 Service Discover plugin)
  until it has gone through the ECO process.  Once approved, will resubmit
  to include the plugin.</changelog>
  <changelog author="kallan@suse.com" date="1591185600">- VMware has now asked that in updating to 11.1.0 (build 16036546) (boo#1171764)
  to hold off on producing the open-vm-tools-sdmp service discovery plugin
  (boo#1171765) for all SUSE versions due to the plugin's dependency on
  netstat.  Once they have removed the netstat dependency we will need to go
  through the ECO process to get the plugin added.</changelog>
  <changelog author="kallan@suse.com" date="1592395200">- jsc#ECO-2164 for update 11.1.0 (build 16036546) (boo#1171764)
- Fixed bug (bsc#1172693) by removing the 'pam_securetty.so' line from
  pam-vmtoolsd.patch as instructed by vmware (boo#1171003).
  This should fix both (boo#1171003) and (bsc#1172693).</changelog>
  <changelog author="kallan@suse.com" date="1592481600">- jsc#ECO-2164 for update 11.1.0 (build 16036546) (boo#1171764)
  with new 'Service Discovery' plugin (boo#1171765).
- Reenabled building sdmp in the spec file.
- Added patches (boo#1171765)
  + sdmp-get-version.patch
  + sdmp-netstat-to-ss.patch
  + sdmp-warnings.patch</changelog>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
</package>
<package pkgid="8ae6a791c7cabb1790451a033c0873c9b030beb18ccaca9f45fcc1dfea23051f" name="lvm2" arch="aarch64">
  <version epoch="0" ver="2.03.05" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="74f9012e08109fd625670af4d60ea9d99e1757d7096afb6a310fec3519b27769" name="lvm2" arch="src">
  <version epoch="0" ver="2.03.05" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="8e5370b8d03ef244802caab1e3727473fac8522a92fa45f491b5bbe25e29ba99" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="ad7ff70e2f8b6223d46c98d76414e67e78f31682d4d184927963e9efdec6de7d" name="lvm2-device-mapper" arch="src">
  <version epoch="0" ver="2.03.05" rel="150400.185.1"/>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
</package>
<package pkgid="bf3d12032d931e32163f21e7c4b08c7ef6beac054f2ac1b237389a7a25ae7deb" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.0" rel="150400.3.9.3"/>
  <changelog author="daniel.wagner@suse.com" date="1629288000">- update to 1.15
  * add NVMe MI features
  * add uuid index in get and set features command
  * nvme-cli: Add lsi option for get-log command
  * nvme: add json output format for list_ns
  * fabrics: add fast_io_fail_tmo option
  * fabrics: add --host-iface option
  * nvme: add latency parameter for passthru commands
  * nvme: add optional copy format support id ctrl field
  * nvme: add zone desc changed notice async event
  * nvme: add json, binary and human readable output format for id iocs
  * fabrics: print device name on connect
  * nvme: add get log page 2.0 spec fields
  * nvme: add the status codes from 2.0 spec
  * zns: add timeout parameter for Zone Management Commands
  * nvme: add CDW2 and CDW3 support for Write Zeroes and Verify Command
  * nvme: add Storage Tag Check field in NVM Commands
  * bash: updated completion support for latest commands and plugins
  * nvme: add capacity management command support
  * add identify CNS 0x18 domain list support</changelog>
  <changelog author="jsegitz@suse.com" date="1634040000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_nvmf-connect@.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
</package>
<package pkgid="ca8ed214ccdb65720f9361220dca06e29686b7ad8f8f3c0e672f77873ef9af69" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.0" rel="150400.3.9.3"/>
  <changelog author="daniel.wagner@suse.com" date="1629288000">- update to 1.15
  * add NVMe MI features
  * add uuid index in get and set features command
  * nvme-cli: Add lsi option for get-log command
  * nvme: add json output format for list_ns
  * fabrics: add fast_io_fail_tmo option
  * fabrics: add --host-iface option
  * nvme: add latency parameter for passthru commands
  * nvme: add optional copy format support id ctrl field
  * nvme: add zone desc changed notice async event
  * nvme: add json, binary and human readable output format for id iocs
  * fabrics: print device name on connect
  * nvme: add get log page 2.0 spec fields
  * nvme: add the status codes from 2.0 spec
  * zns: add timeout parameter for Zone Management Commands
  * nvme: add CDW2 and CDW3 support for Write Zeroes and Verify Command
  * nvme: add Storage Tag Check field in NVM Commands
  * bash: updated completion support for latest commands and plugins
  * nvme: add capacity management command support
  * add identify CNS 0x18 domain list support</changelog>
  <changelog author="jsegitz@suse.com" date="1634040000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_nvmf-connect@.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
</package>
<package pkgid="27128a7132597c33d2d3ddb3692e8636114fe13e37f6de14e8deb3e1aff8b456" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.0" rel="150400.3.9.3"/>
  <changelog author="daniel.wagner@suse.com" date="1629288000">- update to 1.15
  * add NVMe MI features
  * add uuid index in get and set features command
  * nvme-cli: Add lsi option for get-log command
  * nvme: add json output format for list_ns
  * fabrics: add fast_io_fail_tmo option
  * fabrics: add --host-iface option
  * nvme: add latency parameter for passthru commands
  * nvme: add optional copy format support id ctrl field
  * nvme: add zone desc changed notice async event
  * nvme: add json, binary and human readable output format for id iocs
  * fabrics: print device name on connect
  * nvme: add get log page 2.0 spec fields
  * nvme: add the status codes from 2.0 spec
  * zns: add timeout parameter for Zone Management Commands
  * nvme: add CDW2 and CDW3 support for Write Zeroes and Verify Command
  * nvme: add Storage Tag Check field in NVM Commands
  * bash: updated completion support for latest commands and plugins
  * nvme: add capacity management command support
  * add identify CNS 0x18 domain list support</changelog>
  <changelog author="jsegitz@suse.com" date="1634040000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_nvmf-connect@.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
</package>
<package pkgid="110763db3888ece58335ebd0c41983f945902c53292c2cce7165b9f13c2c0152" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.1.0" rel="150300.21.2"/>
  <changelog author="kallan@suse.com" date="1583496000">- Update to 11.0.5 (build 15389592) (boo#1165955)
  + DNS server is reported incorrectly as '127.0.0.53' when using
    systemd-resolved. DNS server is reported incorrectly in GuestInfo as
    '127.0.0.53' , when the OS uses systemd-resolved. This issue is fixed
    in this release.
- Conditionalized the use of systemd_ordering.  Use systemd_ordering
  for factory, openSUSE &gt;= 15, and SLE &gt;= 15.  Use systemd_requires
  for older openSUSE and SLE releases.
- Conditionalize out the use of %license COPYING for SLE 12 SP2 and older.
- Added patches
  + gcc10-warning.patch (boo#1160408)
  + diskinfo-debug-logging-1162435.patch (boo#1162435 and bsc#1162119)
  - Changed g_warning to g_debug
  + app_info_plugin.patch (boo#1165955)
- Drop unnecessary patch:
  - fix-leaks-Aliases-MappedAliases.patch</changelog>
  <changelog author="kallan@suse.com" date="1583755200">- Simplified the conditional around systemd_ordering to just use
  suse_version &gt;= 1500.</changelog>
  <changelog author="kallan@suse.com" date="1589544000">- Update to 11.1.0 (build 16036546) (boo#1171764, boo#1171765)
  + open-vm-tools 11.1.0 includes a new 'Service Discovery' plugin, which
    connects with the vRealize Operations Manager product.  For more
    information and details on configuring this plugin, refer to Configuring
    Service Discovery.
  + In this release, a new tools.conf switch is added to enable and disable
    the guest customization in the guest virtual machine. By default, the
    guest customization is enabled. For more details, refer KB 78903.
- Spec file changes to remove the is_opensuse macros where possible.
- Remoed the mv vm-support line from the spec file.  vm-support is now
  automatically placed in the /usr/bin directory.
- Added version number to Requires: libxmlsec1-openssl1 to help with vgauth
  version checking.
- Added patches
  + pam-vmtoolsd.patch (boo#1171003)
- Drop unnecessary patch:
  - app_info_plugin.patch
  - diskinfo-debug-logging-1162435.patch
  - gcc9-static-inline.patch</changelog>
  <changelog author="kallan@suse.com" date="1590667200">- While updating to 11.1.0 (build 16036546) (boo#1171764) hold off on
  producing the open-vm-tools-sdmp (boo#1171765 Service Discover plugin)
  until it has gone through the ECO process.  Once approved, will resubmit
  to include the plugin.</changelog>
  <changelog author="kallan@suse.com" date="1591185600">- VMware has now asked that in updating to 11.1.0 (build 16036546) (boo#1171764)
  to hold off on producing the open-vm-tools-sdmp service discovery plugin
  (boo#1171765) for all SUSE versions due to the plugin's dependency on
  netstat.  Once they have removed the netstat dependency we will need to go
  through the ECO process to get the plugin added.</changelog>
  <changelog author="kallan@suse.com" date="1592395200">- jsc#ECO-2164 for update 11.1.0 (build 16036546) (boo#1171764)
- Fixed bug (bsc#1172693) by removing the 'pam_securetty.so' line from
  pam-vmtoolsd.patch as instructed by vmware (boo#1171003).
  This should fix both (boo#1171003) and (bsc#1172693).</changelog>
  <changelog author="kallan@suse.com" date="1592481600">- jsc#ECO-2164 for update 11.1.0 (build 16036546) (boo#1171764)
  with new 'Service Discovery' plugin (boo#1171765).
- Reenabled building sdmp in the spec file.
- Added patches (boo#1171765)
  + sdmp-get-version.patch
  + sdmp-netstat-to-ss.patch
  + sdmp-warnings.patch</changelog>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
</package>
<package pkgid="94d3e556439ba9803cc79feb2a96d1c263ca46871f457f099eef3f2cf9f48470" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.1.0" rel="150300.21.2"/>
  <changelog author="kallan@suse.com" date="1583496000">- Update to 11.0.5 (build 15389592) (boo#1165955)
  + DNS server is reported incorrectly as '127.0.0.53' when using
    systemd-resolved. DNS server is reported incorrectly in GuestInfo as
    '127.0.0.53' , when the OS uses systemd-resolved. This issue is fixed
    in this release.
- Conditionalized the use of systemd_ordering.  Use systemd_ordering
  for factory, openSUSE &gt;= 15, and SLE &gt;= 15.  Use systemd_requires
  for older openSUSE and SLE releases.
- Conditionalize out the use of %license COPYING for SLE 12 SP2 and older.
- Added patches
  + gcc10-warning.patch (boo#1160408)
  + diskinfo-debug-logging-1162435.patch (boo#1162435 and bsc#1162119)
  - Changed g_warning to g_debug
  + app_info_plugin.patch (boo#1165955)
- Drop unnecessary patch:
  - fix-leaks-Aliases-MappedAliases.patch</changelog>
  <changelog author="kallan@suse.com" date="1583755200">- Simplified the conditional around systemd_ordering to just use
  suse_version &gt;= 1500.</changelog>
  <changelog author="kallan@suse.com" date="1589544000">- Update to 11.1.0 (build 16036546) (boo#1171764, boo#1171765)
  + open-vm-tools 11.1.0 includes a new 'Service Discovery' plugin, which
    connects with the vRealize Operations Manager product.  For more
    information and details on configuring this plugin, refer to Configuring
    Service Discovery.
  + In this release, a new tools.conf switch is added to enable and disable
    the guest customization in the guest virtual machine. By default, the
    guest customization is enabled. For more details, refer KB 78903.
- Spec file changes to remove the is_opensuse macros where possible.
- Remoed the mv vm-support line from the spec file.  vm-support is now
  automatically placed in the /usr/bin directory.
- Added version number to Requires: libxmlsec1-openssl1 to help with vgauth
  version checking.
- Added patches
  + pam-vmtoolsd.patch (boo#1171003)
- Drop unnecessary patch:
  - app_info_plugin.patch
  - diskinfo-debug-logging-1162435.patch
  - gcc9-static-inline.patch</changelog>
  <changelog author="kallan@suse.com" date="1590667200">- While updating to 11.1.0 (build 16036546) (boo#1171764) hold off on
  producing the open-vm-tools-sdmp (boo#1171765 Service Discover plugin)
  until it has gone through the ECO process.  Once approved, will resubmit
  to include the plugin.</changelog>
  <changelog author="kallan@suse.com" date="1591185600">- VMware has now asked that in updating to 11.1.0 (build 16036546) (boo#1171764)
  to hold off on producing the open-vm-tools-sdmp service discovery plugin
  (boo#1171765) for all SUSE versions due to the plugin's dependency on
  netstat.  Once they have removed the netstat dependency we will need to go
  through the ECO process to get the plugin added.</changelog>
  <changelog author="kallan@suse.com" date="1592395200">- jsc#ECO-2164 for update 11.1.0 (build 16036546) (boo#1171764)
- Fixed bug (bsc#1172693) by removing the 'pam_securetty.so' line from
  pam-vmtoolsd.patch as instructed by vmware (boo#1171003).
  This should fix both (boo#1171003) and (bsc#1172693).</changelog>
  <changelog author="kallan@suse.com" date="1592481600">- jsc#ECO-2164 for update 11.1.0 (build 16036546) (boo#1171764)
  with new 'Service Discovery' plugin (boo#1171765).
- Reenabled building sdmp in the spec file.
- Added patches (boo#1171765)
  + sdmp-get-version.patch
  + sdmp-netstat-to-ss.patch
  + sdmp-warnings.patch</changelog>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
</package>
<package pkgid="8caf31b48ffcef1bd308ebbf173423da457b32d3c8c5119cb2be737d30a6598b" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="52c8b8cb30199aba9fbc5a063879cb837db72fa8c1c6af988d6c7d3f45d7c7ba" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="1f3c9236e0f48ff29aea341763378d91df082652ecc17b1e267b36f9427b46c1" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.16.1"/>
  <changelog author="pmonreal@suse.com" date="1647604800">- FIPS: Additional PBKDF2 requirements for KAT [bsc#1197280]
  * The IG 10.3.A and SP800-132 require some minimum parameters for
    the salt length, password length and iteration count. These
    parameters should be also used in the KAT.
  * Add openssl-1_1-FIPS-PBKDF2-KAT-requirements.patch</changelog>
  <changelog author="jsikes@suse.com" date="1650542400">- FIPS: add bsc1185319-FIPS-KAT-for-ECDSA.patch
  * Known answer test for ECDSA
  * bsc#1185319
- FIPS: add bsc1198207-FIPS-add-hash_hmac-drbg-kat.patch
  * Enable tests for Deterministic Random Bit Generator
  * bsc#1198207
- Bypass a regression test that fails in FIPS mode.
  * [openssl-1_1-shortcut-test_afalg_aes_cbc.patch]</changelog>
  <changelog author="jsikes@suse.com" date="1651492800">- FIPS: Added signature verification test to
    bsc1185319-FIPS-KAT-for-ECDSA.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637
  * Sourced from https://github.com/openssl/openssl/pull/18446/commits</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added openssl-1_1-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1656849600">- Encrypt the sixteen bytes that were unencrypted in some circumstances
  on 32-bit x86 platforms.
  * [bsc#1201099, CVE-2022-2097]
  * added openssl-CVE-2022-2097.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- FIPS: Add zeroization of temporary variables to the hmac integrity
  function FIPSCHECK_verify(). [bsc#1190653]
  * Add openssl-1_1-Zeroization.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1658404801">- FIPS: OpenSSL Provide a service-level indicator [bsc#1190651]
  * Add patches:
  - openssl-1_1-ossl-sli-000-fix-build-error.patch
  - openssl-1_1-ossl-sli-001-fix-faults-preventing-make-update.patch
  - openssl-1_1-ossl-sli-002-ran-make-update.patch
  - openssl-1_1-ossl-sli-003-add-sli.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1661860800">- FIPS: OpenSSL: Port openssl to use jitterentropy
  [bsc#1202148, jsc#SLE-24941]
  * Add openssl-1_1-jitterentropy-3.4.0.patch
  * Add build dependency on jitterentropy-devel &gt;= 3.4.0 and
    libjitterentropy3 &gt;= 3.4.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
</package>
<package pkgid="99fa0c9a78a36443194839ab48e718944ca75b1cc22e3dd5cbab8c90840f6060" name="pixman" arch="src">
  <version epoch="0" ver="0.40.0" rel="150400.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1342872000">- Update to version 0.26.2:
  + Some bug fixes.
  + Custom build rules for ARM/iwMMXt.
  + An important bug fix for MMX/x86.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1352462400">- Update to version 0.28.0:
  + Support for sRGB coded images.
  + New API for fast glyph rendering.
  + Faster bilinear scaling on iwMMX, Loongson and MMX.
  + More fast paths in the MIPS DSPr2 backend.
  + Faster scaling in general and on SSE2 in particular.</changelog>
  <changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 0.28.2:
  + Fixes for 64 bit Windows, clang, and PowerPC on MacOS and
    OpenBSD.</changelog>
  <changelog author="dimstar@opensuse.org" date="1368100800">- Update to version 0.30.0:
  + Support for high-quality image downscaling.
  + Much improved ARMv6 assembly.
  + Improved rendering quality for gradients.
  + Improvements to the SSE2 backend.
  + Improvements to MIPS DSPr2 backend.
  + Improvements to test suite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1375876800">- Update to version 0.30.2:
  + Require GTK+ version &gt;= 2.16.
  + Use AC_LINK_IFELSE to check if the Loongson MMI code can link.
  + configure.ac: Don't use '+=' since it's not POSIX.
  + test:
  - Fix build on MSVC.
  - fix matrix-test on big endian systems.
  + Fix broken build when HAVE_CONFIG_H is undefined, e.g. on
    Win32.</changelog>
  <changelog author="dmueller@suse.com" date="1382184000">- Disable neon on all %arm platforms.</changelog>
  <changelog author="dimstar@opensuse.org" date="1384776000">- Update to version 0.32.4:
  + Fix the SSSE3 CPUID detection.
- Changes from version 0.32.2:
  + Build fixes.
- Changes from version 0.32.0:
  + This release contains performance improvements to bilinear
    scaling, and a large number of bug fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1402056000">- RENDER extension hotfix: Add --disable-vmx for PPC64LE.
  This makes the RENDER extension work for the time being.
  Proper fix for vmx will come later (bnc#876757) (from Egbert
  Eich).</changelog>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.32.6:
  + MIPS: Fix exported symbols in public API.
  + build: Check if the compiler supports GCC vector extensions.
  + Bugs fixed: rh#972647, fdo#69014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440244800">- Update to version 0.33.2:
  + ARMv6 - Many fast paths implementations were added.
  + PPC64/PPC64LE - Fix all outstanding bugs and add many fast
    paths implementations using vmx.
  + Major enhancements to lowlevel-blt-bench utility.
  + A couple of fixes and enhancements to mmx code.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445947200">- Update to version 0.33.4:
  + Important security fix to prevent stack buffer overflow.
  + POWER: New fast-paths and optimizations to existing fast-paths.
  + ARMv6: New fast-path.
  + Tests: New cover and fence-image-self tests.
  + Remove redundant corrections in various calculations for
    COVER-CLIP and COVER analysis.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 0.33.6:
  + configura.ac: fix test for SSE2 &amp; SSSE3 assembler support.
  + mmx: Improve detection of support for "K" constraint.
  + Revert "mmx: Use MMX2 intrinsics from xmmintrin.h directly".</changelog>
  <changelog author="zaitor@opensuse.org" date="1454328000">- Update to version 0.34.0:
  + No changes from last version, stable version release only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459771200">- Add pixman-private-correct-include.patch: pixman-private: include
  &lt;float.h&gt; only in C code, patch from upstream git.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Fix SRPM group. Update summaries.</changelog>
  <changelog author="mvetter@suse.com" date="1542974400">- Update to version 0.36.0:
  + Add tests for (a)rgb floating point formats
  + Add support for argb/xrgb float formats, v5
  + Fix stride calculation in stress-test
  + Adjust for clang's removal of __builtin_shuffle
  + Fix vector loads on ppc64le
  + Promote unsigned short to unsigned int explicitly
  + pixman-filter: Made Gaussian a bit wider
  + pixman-filter: Nested polynomial for cubic
  + pixman-filter: Fix several issues related to normalization
  + pixman-filter: Speed up BOX/BOX filter
  + pixman-filter: integral splitting is only needed for triangle
    filterdd
  + pixman-filter: Correct Simpsons integration
  + pixman-filter: reduce amount of malloc/free/memcpy to generate
    filter
  + pixman-image: Added enable-gnuplot config to view filters in
    gnuplot
  + pixman-fast-path.c: Pick NEAREST affine fast paths before
    BILINEAR ones
  + pixman-private: include &lt;float.h&gt; only in C code
- Remove pixman-private-correct-include.patch: upstreamed</changelog>
  <changelog author="info@paolostivanin.com" date="1587384000">- Update to versio 0.40.0:
  + Meson build system improvements
  + Supporting optimizations on Hygon Dhyana processors
    to match what is enabled for Intel/AMD CPUs.
  + A few Loongson fixes/improvements.
  + Lots of other fixes</changelog>
  <changelog author="mgorse@suse.com" date="1667563200">- Add pixman-CVE-2022-44638.patch: avoid an integer overflow
  (boo#1205033 CVE-2022-44638).</changelog>
</package>
<package pkgid="476817cda7e65a1fe3f61df542a7c95131250475f67b504a313500f284aae174" name="python-msgpack" arch="src">
  <version epoch="0" ver="0.5.6" rel="150100.3.3.1"/>
  <changelog author="alexandre@exatati.com.br" date="1356177600">- Update to 0.2.4:
  - Fix SEGV when object_hook or object_pairs_hook raise Exception. (#39)</changelog>
  <changelog author="p.drouand@gmail.com" date="1357905600">- Initial python3 support</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Simplify macro usage</changelog>
  <changelog author="alexandre@exatati.com.br" date="1361188800">- Update to 0.3.0:
  Incompatible Changes
  - Default value of use_list is True for now. (It was False for
    0.2.x) You should pass it explicitly for compatibility to 0.2.x.
  Changes
  - Pure Python fallback module is added. (thanks to bwesterb)
  - Add .skip() method to Unpacker (thanks to jnothman)
  - Add capturing feature. You can pass the writable object to
    Unpacker.unpack() as a second parameter.
  - Add Packer.pack_array_header and Packer.pack_map_header. These
    methods only pack header of each type.
  - Add autoreset option to Packer (default: True). Packer doesn't
    return packed bytes and clear internal buffer.
  - Add Packer.pack_map_pairs. It packs sequence of pair to map type.</changelog>
  <changelog author="speilicke@suse.com" date="1367496000">- Package COPYING and README.rst
- Run testsuite</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.4.0
  + Raises TypeError instead of ValueError when packer receives
    unsupported type.
  + Support New msgpack spec.
- Use download Url as source
- Add python-argparse requirement for SLE11SP3 to get tests working</changelog>
  <changelog author="toddrme2178@gmail.com" date="1416312000">- Update to 0.4.2
  Bugfixes
  - Unpacker doesn't increment refcount of ExtType hook.
  - Packer raises no exception for inputs doesn't fit to msgpack format.
- Update to 0.4.1
  Changes
  - fallback.Unpacker.feed() supports bytearray.
  Bugs fixed
  - Unpacker doesn't increment refcount of hooks. Hooks may be GCed while unpacking.
  - Unpacker may read unfilled internal buffer.</changelog>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to version 0.4.6
  * fallback.Unpacker: Fix Data corruption when OutOfData. This bug
    only affects "Streaming unpacking."
- Changes from version 0.4.5
  * Fix test failure on pytest 2.3.
  * Fix typos in ChangeLog.
  * Improve README.rst
- Changes from version 0.4.4
  * Fix compile error.
- Changes from version 0.4.3
  * Unpacker may unpack wrong uint32 value on 32bit or LLP64
    environment. (#101)
  * Build failed on Windows Python 2.7.</changelog>
  <changelog author="mc@suse.com" date="1445083200">- build conditionally without tests</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.4.8</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Implement single-spec version.</changelog>
  <changelog author="dmueller@suse.com" date="1517054400">- update to 0.5.1:
  * Package name on PyPI was changed to msgpack from 0.5.
- rename from msgpack-python</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Strip rheotrics from descriptions.</changelog>
  <changelog author="tbechtold@suse.com" date="1517918400">- update to version 0.5.4
  * packer: Use PyUnicode_AsUTF8AndSize() for utf-8 (#272)
  * Fix encoding and unicode_errors (#277)
  * Undeprecate unicode_errors (#278)
  * Packer.pack() reset buffer on exception (#274)
  * Use cython's cast for converting encoding and errors (#279)
  * 0.5.4
  * Add raw_as_bytes option to Unpacker. (#265)
  * s/raw_as_bytes/raw/g (#276)</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- fix typo in obsoletes</changelog>
  <changelog author="alarrosa@suse.com" date="1519646400">- Provide also python-msgpack-python in the python2 package to
  be able to obsolete the python2-msgpack-python package correctly.</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Update to version 0.5.6 (boo#1123558)
  * Fix fallback.Unpacker.feed() dropped unused data from buffer
  * Resurrect fallback.unpack() and _unpacker.unpack(). They were
    removed at 0.5.5 but it breaks backward compatibility.
- Update to version 0.5.5
  * Fix memory leak in pure Python Unpacker.feed()
  * Fix unpack() didn't support raw option</changelog>
  <changelog author="alarrosa@suse.com" date="1548763200">- Use %license</changelog>
  <changelog author="mcepl@suse.com" date="1664280000">- Loose the filelist for the package info to avoid FTBFS on
  SLE-15-SP5 (bsc#1203743).</changelog>
</package>
<package pkgid="6bf22b6c480d3dcd665ff86560a3c0c5ff45f4c88bc609e1eadb61858222c412" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.37.2"/>
  <changelog author="mcepl@suse.com" date="1631707200">- Update to 3.6.15:
  - bpo-43124: Made the internal putcmd function in smtplib
    sanitize input for presence of \r and \n characters to avoid
    (unlikely) command injection. Library
  - bpo-45001: Made email date parsing more robust against
    malformed input, namely a whitespace-only Date: header. Patch
    by Wouter Bolsterlee. Tests
  - bpo-38965: Fix test_faulthandler on GCC 10. Use the
    ?volatile? keyword in faulthandler._stack_overflow() to
    prevent tail call optimization on any compiler, rather than
    relying on compiler specific pragma.
- Remove upstreamed patches:
  - faulthandler_stack_overflow_on_GCC10.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
</package>
<package pkgid="329894139c4323fa49554ed55fca79308ffd405206e1824a1abcd3f2fe38a5a6" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.37.2"/>
  <changelog author="mcepl@suse.com" date="1631707200">- Update to 3.6.15:
  - bpo-43124: Made the internal putcmd function in smtplib
    sanitize input for presence of \r and \n characters to avoid
    (unlikely) command injection. Library
  - bpo-45001: Made email date parsing more robust against
    malformed input, namely a whitespace-only Date: header. Patch
    by Wouter Bolsterlee. Tests
  - bpo-38965: Fix test_faulthandler on GCC 10. Use the
    ?volatile? keyword in faulthandler._stack_overflow() to
    prevent tail call optimization on any compiler, rather than
    relying on compiler specific pragma.
- Remove upstreamed patches:
  - faulthandler_stack_overflow_on_GCC10.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
</package>
<package pkgid="2fa7e10c64dd44f1a9dd4f6e033e5b1a0393fbbc42125a8731b87e218454a69b" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.37.2"/>
  <changelog author="mcepl@suse.com" date="1631707200">- Update to 3.6.15:
  - bpo-43124: Made the internal putcmd function in smtplib
    sanitize input for presence of \r and \n characters to avoid
    (unlikely) command injection. Library
  - bpo-45001: Made email date parsing more robust against
    malformed input, namely a whitespace-only Date: header. Patch
    by Wouter Bolsterlee. Tests
  - bpo-38965: Fix test_faulthandler on GCC 10. Use the
    ?volatile? keyword in faulthandler._stack_overflow() to
    prevent tail call optimization on any compiler, rather than
    relying on compiler specific pragma.
- Remove upstreamed patches:
  - faulthandler_stack_overflow_on_GCC10.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
</package>
<package pkgid="bf90cf80aaed9bd587236e9d500469f0e915a4fa64b7649dcd2ffaca3c111f28" name="python3-audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="2170df737f1d24446a9ece9712d498540d3e9765486ba99f25bd64a5094a6543" name="python3-audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="952fcee05e8e0331bf34c44adeeaae8181c82a7ad3a640cf83202ab081cf65f2" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.37.2"/>
  <changelog author="mcepl@suse.com" date="1631707200">- Update to 3.6.15:
  - bpo-43124: Made the internal putcmd function in smtplib
    sanitize input for presence of \r and \n characters to avoid
    (unlikely) command injection. Library
  - bpo-45001: Made email date parsing more robust against
    malformed input, namely a whitespace-only Date: header. Patch
    by Wouter Bolsterlee. Tests
  - bpo-38965: Fix test_faulthandler on GCC 10. Use the
    ?volatile? keyword in faulthandler._stack_overflow() to
    prevent tail call optimization on any compiler, rather than
    relying on compiler specific pragma.
- Remove upstreamed patches:
  - faulthandler_stack_overflow_on_GCC10.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
</package>
<package pkgid="57e7cf9ea44cd70f442f4fee74c461b2dbe3c9501ff5243705e66a24af008891" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.37.2"/>
  <changelog author="mcepl@suse.com" date="1631707200">- Update to 3.6.15:
  - bpo-43124: Made the internal putcmd function in smtplib
    sanitize input for presence of \r and \n characters to avoid
    (unlikely) command injection. Library
  - bpo-45001: Made email date parsing more robust against
    malformed input, namely a whitespace-only Date: header. Patch
    by Wouter Bolsterlee. Tests
  - bpo-38965: Fix test_faulthandler on GCC 10. Use the
    ?volatile? keyword in faulthandler._stack_overflow() to
    prevent tail call optimization on any compiler, rather than
    relying on compiler specific pragma.
- Remove upstreamed patches:
  - faulthandler_stack_overflow_on_GCC10.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
</package>
<package pkgid="606debca9eea3aabc5c2ba6adba79895a05c25d7d93cd136caaed67df91ed044" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.37.2"/>
  <changelog author="mcepl@suse.com" date="1631707200">- Update to 3.6.15:
  - bpo-43124: Made the internal putcmd function in smtplib
    sanitize input for presence of \r and \n characters to avoid
    (unlikely) command injection. Library
  - bpo-45001: Made email date parsing more robust against
    malformed input, namely a whitespace-only Date: header. Patch
    by Wouter Bolsterlee. Tests
  - bpo-38965: Fix test_faulthandler on GCC 10. Use the
    ?volatile? keyword in faulthandler._stack_overflow() to
    prevent tail call optimization on any compiler, rather than
    relying on compiler specific pragma.
- Remove upstreamed patches:
  - faulthandler_stack_overflow_on_GCC10.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
</package>
<package pkgid="cd03eea1444c9c85beb5c0466b4b1c8d6ba413c582c1424524ff657be1f37764" name="python3-msgpack" arch="aarch64">
  <version epoch="0" ver="0.5.6" rel="150100.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1416312000">- Update to 0.4.2
  Bugfixes
  - Unpacker doesn't increment refcount of ExtType hook.
  - Packer raises no exception for inputs doesn't fit to msgpack format.
- Update to 0.4.1
  Changes
  - fallback.Unpacker.feed() supports bytearray.
  Bugs fixed
  - Unpacker doesn't increment refcount of hooks. Hooks may be GCed while unpacking.
  - Unpacker may read unfilled internal buffer.</changelog>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to version 0.4.6
  * fallback.Unpacker: Fix Data corruption when OutOfData. This bug
    only affects "Streaming unpacking."
- Changes from version 0.4.5
  * Fix test failure on pytest 2.3.
  * Fix typos in ChangeLog.
  * Improve README.rst
- Changes from version 0.4.4
  * Fix compile error.
- Changes from version 0.4.3
  * Unpacker may unpack wrong uint32 value on 32bit or LLP64
    environment. (#101)
  * Build failed on Windows Python 2.7.</changelog>
  <changelog author="mc@suse.com" date="1445083200">- build conditionally without tests</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.4.8</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Implement single-spec version.</changelog>
  <changelog author="dmueller@suse.com" date="1517054400">- update to 0.5.1:
  * Package name on PyPI was changed to msgpack from 0.5.
- rename from msgpack-python</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Strip rheotrics from descriptions.</changelog>
  <changelog author="tbechtold@suse.com" date="1517918400">- update to version 0.5.4
  * packer: Use PyUnicode_AsUTF8AndSize() for utf-8 (#272)
  * Fix encoding and unicode_errors (#277)
  * Undeprecate unicode_errors (#278)
  * Packer.pack() reset buffer on exception (#274)
  * Use cython's cast for converting encoding and errors (#279)
  * 0.5.4
  * Add raw_as_bytes option to Unpacker. (#265)
  * s/raw_as_bytes/raw/g (#276)</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- fix typo in obsoletes</changelog>
  <changelog author="alarrosa@suse.com" date="1519646400">- Provide also python-msgpack-python in the python2 package to
  be able to obsolete the python2-msgpack-python package correctly.</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Update to version 0.5.6 (boo#1123558)
  * Fix fallback.Unpacker.feed() dropped unused data from buffer
  * Resurrect fallback.unpack() and _unpacker.unpack(). They were
    removed at 0.5.5 but it breaks backward compatibility.
- Update to version 0.5.5
  * Fix memory leak in pure Python Unpacker.feed()
  * Fix unpack() didn't support raw option</changelog>
  <changelog author="alarrosa@suse.com" date="1548763200">- Use %license</changelog>
  <changelog author="mcepl@suse.com" date="1664280000">- Loose the filelist for the package info to avoid FTBFS on
  SLE-15-SP5 (bsc#1203743).</changelog>
</package>
<package pkgid="ef39fa91132748507b1cc134cce31582fbe4a80528ef3100e55b7a97e81681e0" name="python3-msgpack" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="150100.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1416312000">- Update to 0.4.2
  Bugfixes
  - Unpacker doesn't increment refcount of ExtType hook.
  - Packer raises no exception for inputs doesn't fit to msgpack format.
- Update to 0.4.1
  Changes
  - fallback.Unpacker.feed() supports bytearray.
  Bugs fixed
  - Unpacker doesn't increment refcount of hooks. Hooks may be GCed while unpacking.
  - Unpacker may read unfilled internal buffer.</changelog>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to version 0.4.6
  * fallback.Unpacker: Fix Data corruption when OutOfData. This bug
    only affects "Streaming unpacking."
- Changes from version 0.4.5
  * Fix test failure on pytest 2.3.
  * Fix typos in ChangeLog.
  * Improve README.rst
- Changes from version 0.4.4
  * Fix compile error.
- Changes from version 0.4.3
  * Unpacker may unpack wrong uint32 value on 32bit or LLP64
    environment. (#101)
  * Build failed on Windows Python 2.7.</changelog>
  <changelog author="mc@suse.com" date="1445083200">- build conditionally without tests</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.4.8</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Implement single-spec version.</changelog>
  <changelog author="dmueller@suse.com" date="1517054400">- update to 0.5.1:
  * Package name on PyPI was changed to msgpack from 0.5.
- rename from msgpack-python</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Strip rheotrics from descriptions.</changelog>
  <changelog author="tbechtold@suse.com" date="1517918400">- update to version 0.5.4
  * packer: Use PyUnicode_AsUTF8AndSize() for utf-8 (#272)
  * Fix encoding and unicode_errors (#277)
  * Undeprecate unicode_errors (#278)
  * Packer.pack() reset buffer on exception (#274)
  * Use cython's cast for converting encoding and errors (#279)
  * 0.5.4
  * Add raw_as_bytes option to Unpacker. (#265)
  * s/raw_as_bytes/raw/g (#276)</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- fix typo in obsoletes</changelog>
  <changelog author="alarrosa@suse.com" date="1519646400">- Provide also python-msgpack-python in the python2 package to
  be able to obsolete the python2-msgpack-python package correctly.</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Update to version 0.5.6 (boo#1123558)
  * Fix fallback.Unpacker.feed() dropped unused data from buffer
  * Resurrect fallback.unpack() and _unpacker.unpack(). They were
    removed at 0.5.5 but it breaks backward compatibility.
- Update to version 0.5.5
  * Fix memory leak in pure Python Unpacker.feed()
  * Fix unpack() didn't support raw option</changelog>
  <changelog author="alarrosa@suse.com" date="1548763200">- Use %license</changelog>
  <changelog author="mcepl@suse.com" date="1664280000">- Loose the filelist for the package info to avoid FTBFS on
  SLE-15-SP5 (bsc#1203743).</changelog>
</package>
<package pkgid="249c65ac47e9cc94148733e1c7d0058ddc4f2b2afdc114c8540365502a301b20" name="supportutils" arch="noarch">
  <version epoch="0" ver="3.1.21" rel="150300.7.35.15.1"/>
  <changelog author="jason.record@gmail.com" date="1616414400">- [powerpc] Collect dynamic_debug log files for ibmvNIC #98 (bsc#1183826)</changelog>
  <changelog author="jason.record@suse.com" date="1618488000">- Additions to version 3.1.15
  + Added drbd-overview to drbd.txt
  + Added list-timers to systemd.txt (bsc#1169348)
  + Including nfs4 in search (bsc#1184829)
- Minor: Fix a typo (executible -&gt; executable) #99
- Changed minor wording to loaded module</changelog>
  <changelog author="jason.record@suse.com" date="1618833600">- Additions to version 3.1.15
  + Checks package signatures in rpm.txt (bsc#1021918)
  + Optimize find (bsc#1184912)
- Using zypper --xmlout (bsc#1181351)
- Error fix for sysfs.txt (bsc#1089870)</changelog>
  <changelog author="jason.record@suse.com" date="1620820800">- getappcore checks for valid compression binary (bsc#1185991)
- getappcore does not trigger errors with help message (bsc#1185993)</changelog>
  <changelog author="jason.record@suse.com" date="1621857600">- analyzevmcore supports local directories (bsc#1186397)</changelog>
  <changelog author="jason.record@suse.com" date="1622116800">- Fixes to supportconfig
  + Exclude rhn.conf from etc.txt (bsc#1186347)</changelog>
  <changelog author="jason.record@suse.com" date="1623067200">- Changes to version 3.1.16
  + lsof options to improve performance (bsc#1186687)</changelog>
  <changelog author="jason.record@suse.com" date="1625572800">- Changes to version 3.1.17
  + Adding ethtool options g l m to network.txt (jsc#SLE-18240)</changelog>
  <changelog author="jason.record@suse.com" date="1629115200">- Changes to version 3.1.18
  + Added email.txt based on OPTION_EMAIL #108 (bsc#1189028)
  + Include 'multipath -t' output in mpio.txt #105
  + Improved lsblk readability with --ascsi #106
  + Removed duplicate commands in network.txt
  + Remove duplicate firewalld status output #109</changelog>
  <changelog author="jason.record@suse.com" date="1631102400">- Fixed cron package for RPM validation (bsc#1190315)
- Updated spec file with correct URL</changelog>
  <changelog author="jason.record@suse.com" date="1633348800">- Installing to /usr/sbin instead of /sbin (bsc#1191096)
- Added shared memory as a log directory for emergency use (bsc#1190943)</changelog>
  <changelog author="jason.record@suse.com" date="1634558400">- getappcore identifies compressed core files (bsc#1191794)</changelog>
  <changelog author="jason.record@suse.com" date="1637150400">- Merged Include udev rules in /lib/udev/rules.d/ #113
- Merged Move localmessage/warm logs out of messages.txt to new localwarn.txt #87</changelog>
  <changelog author="jason.record@suse.com" date="1639569600">- Changes to version 3.1.19
  + Removed chronyc DNS lookups with -n switch (bsc#1193732)</changelog>
  <changelog author="jason.record@suse.com" date="1641816000">- Changes to version 3.1.19
  + Made /proc directory and network names spaces configurable (bsc#1193868)</changelog>
  <changelog author="jason.record@suse.com" date="1646395200">- Changes to version 3.1.20
  + Added command blkid #114
  + Added s390x specific files and output #115
  + Fix for invalid argument during updates (bsc#1193204)
  + Optimized conf_files, conf_files_text and log_cmd functions #118
  + Fixed iscsi initiator name (bsc#1195797)
  + Added rpcinfo -p output #116
  + Included /etc/sssd/conf.d configuration files #100</changelog>
  <changelog author="jason.record@suse.com" date="1647345600">- Spec file adjusted for usr-merge</changelog>
  <changelog author="jason.record@suse.com" date="1654171200">- Added a listing to /dev/mapper/. #129</changelog>
  <changelog author="jason.record@suse.com" date="1666094400">- Changes to version 3.1.21
  + Added type output with df command in fs-diskio.txt (issue#141)
  + Gather all files in /etc/security/limits.d/ (issue#142)
  + Fixed KVM virtualization detection on bare metal (bsc#1184689)
  + Added logging using journalctl (bsc#1200330)
  + Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)
  + Added system logging configuration and checking in messages_config.txt (issue#103)
  + If rsyslog not installed collect more from journalctl (issue#120)
  + Added systemd-status.txt for the status of all service units (issue#125)
  + autofs includes files in (+dir:&lt;path&gt;) (issue#111)
  + Get current sar data before collecting files (bsc#1192648)
  + Collects everything in /etc/multipath/ (bsc#1192252)
  + Collects power management information in hardware.txt (bsc#1197428)
  + Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
  + Fixed conf_files and conf_text_files so y2log is gathered (issue#134, bsc#1202269)
  + Update to nvme_info and block_info #133 (bsc#1202417)
  + Added IO scheduler (issue#136)
  + Added includedir directories from /etc/sudoers (bsc#1188086)</changelog>
  <changelog author="jason.record@suse.com" date="1666094401">- Added lifecycle information (issue#140)</changelog>
</package>
<package pkgid="ddeb2c4af38da54c6f3a098341a396fb842cb9a0e927f18e1976698cdbb667fc" name="supportutils" arch="src">
  <version epoch="0" ver="3.1.21" rel="150300.7.35.15.1"/>
  <changelog author="jason.record@gmail.com" date="1616414400">- [powerpc] Collect dynamic_debug log files for ibmvNIC #98 (bsc#1183826)</changelog>
  <changelog author="jason.record@suse.com" date="1618488000">- Additions to version 3.1.15
  + Added drbd-overview to drbd.txt
  + Added list-timers to systemd.txt (bsc#1169348)
  + Including nfs4 in search (bsc#1184829)
- Minor: Fix a typo (executible -&gt; executable) #99
- Changed minor wording to loaded module</changelog>
  <changelog author="jason.record@suse.com" date="1618833600">- Additions to version 3.1.15
  + Checks package signatures in rpm.txt (bsc#1021918)
  + Optimize find (bsc#1184912)
- Using zypper --xmlout (bsc#1181351)
- Error fix for sysfs.txt (bsc#1089870)</changelog>
  <changelog author="jason.record@suse.com" date="1620820800">- getappcore checks for valid compression binary (bsc#1185991)
- getappcore does not trigger errors with help message (bsc#1185993)</changelog>
  <changelog author="jason.record@suse.com" date="1621857600">- analyzevmcore supports local directories (bsc#1186397)</changelog>
  <changelog author="jason.record@suse.com" date="1622116800">- Fixes to supportconfig
  + Exclude rhn.conf from etc.txt (bsc#1186347)</changelog>
  <changelog author="jason.record@suse.com" date="1623067200">- Changes to version 3.1.16
  + lsof options to improve performance (bsc#1186687)</changelog>
  <changelog author="jason.record@suse.com" date="1625572800">- Changes to version 3.1.17
  + Adding ethtool options g l m to network.txt (jsc#SLE-18240)</changelog>
  <changelog author="jason.record@suse.com" date="1629115200">- Changes to version 3.1.18
  + Added email.txt based on OPTION_EMAIL #108 (bsc#1189028)
  + Include 'multipath -t' output in mpio.txt #105
  + Improved lsblk readability with --ascsi #106
  + Removed duplicate commands in network.txt
  + Remove duplicate firewalld status output #109</changelog>
  <changelog author="jason.record@suse.com" date="1631102400">- Fixed cron package for RPM validation (bsc#1190315)
- Updated spec file with correct URL</changelog>
  <changelog author="jason.record@suse.com" date="1633348800">- Installing to /usr/sbin instead of /sbin (bsc#1191096)
- Added shared memory as a log directory for emergency use (bsc#1190943)</changelog>
  <changelog author="jason.record@suse.com" date="1634558400">- getappcore identifies compressed core files (bsc#1191794)</changelog>
  <changelog author="jason.record@suse.com" date="1637150400">- Merged Include udev rules in /lib/udev/rules.d/ #113
- Merged Move localmessage/warm logs out of messages.txt to new localwarn.txt #87</changelog>
  <changelog author="jason.record@suse.com" date="1639569600">- Changes to version 3.1.19
  + Removed chronyc DNS lookups with -n switch (bsc#1193732)</changelog>
  <changelog author="jason.record@suse.com" date="1641816000">- Changes to version 3.1.19
  + Made /proc directory and network names spaces configurable (bsc#1193868)</changelog>
  <changelog author="jason.record@suse.com" date="1646395200">- Changes to version 3.1.20
  + Added command blkid #114
  + Added s390x specific files and output #115
  + Fix for invalid argument during updates (bsc#1193204)
  + Optimized conf_files, conf_files_text and log_cmd functions #118
  + Fixed iscsi initiator name (bsc#1195797)
  + Added rpcinfo -p output #116
  + Included /etc/sssd/conf.d configuration files #100</changelog>
  <changelog author="jason.record@suse.com" date="1647345600">- Spec file adjusted for usr-merge</changelog>
  <changelog author="jason.record@suse.com" date="1654171200">- Added a listing to /dev/mapper/. #129</changelog>
  <changelog author="jason.record@suse.com" date="1666094400">- Changes to version 3.1.21
  + Added type output with df command in fs-diskio.txt (issue#141)
  + Gather all files in /etc/security/limits.d/ (issue#142)
  + Fixed KVM virtualization detection on bare metal (bsc#1184689)
  + Added logging using journalctl (bsc#1200330)
  + Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)
  + Added system logging configuration and checking in messages_config.txt (issue#103)
  + If rsyslog not installed collect more from journalctl (issue#120)
  + Added systemd-status.txt for the status of all service units (issue#125)
  + autofs includes files in (+dir:&lt;path&gt;) (issue#111)
  + Get current sar data before collecting files (bsc#1192648)
  + Collects everything in /etc/multipath/ (bsc#1192252)
  + Collects power management information in hardware.txt (bsc#1197428)
  + Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
  + Fixed conf_files and conf_text_files so y2log is gathered (issue#134, bsc#1202269)
  + Update to nvme_info and block_info #133 (bsc#1202417)
  + Added IO scheduler (issue#136)
  + Added includedir directories from /etc/sudoers (bsc#1188086)</changelog>
  <changelog author="jason.record@suse.com" date="1666094401">- Added lifecycle information (issue#140)</changelog>
</package>
<package pkgid="cb120f2bf13479a8aebd76419e35424feacda197b5822a30276bade46bf6853e" name="suseconnect-ng" arch="aarch64">
  <version epoch="0" ver="1.0.0~git0.faee7c196dc1" rel="150400.3.7.3"/>
  <changelog author="jzerebecki@suse.com" date="1626696000">- Update to version 0.0.1~git16.8a5d48c:
  * Add extensions hints for readonly root fs
  * Make the connect package an internal package
  * Document debug output destination difference
  * Add status value constants
  * Add rollback CLI option
  * Fix callHTTP() so connections are reused
  * Fix list-extensions format
  * Fix error from zypper refresh</changelog>
  <changelog author="jzerebecki@suse.com" date="1626955200">- Update to version 0.0.1~git33.b531281:
  * Run integration tests
  * Try to use localized error from server response
  * Write usage help to stdout like the Ruby version
  * Simplify list-extensions template
  * Fix call to create UUID on s390
  * Provides and Obsoletes SUSEConnect
  * Add extensions list tests
  * Fix calls to s390 read_values
  * Add build-s390 target to Makefile
  * hwinfo: don't fail if dmidecode is missing</changelog>
  <changelog author="jzerebecki@suse.com" date="1627041600">- Update to version 0.0.2~git0.ebef3b7:
  * Add --version
  * Fix list-extensions printing "Not available" when using SCC
  * Change --deregister to --de-register</changelog>
  <changelog author="jzerebecki@suse.com" date="1627387200">- Update to version 0.0.3~git0.dacdd3b:
  * Add gofmt target to Makefile
  * Fix gofmt errors
  * Add Requires that weren't explicit (bsc#1188646)
  * Use custom UnmarshalJSON() for the Product struct</changelog>
  <changelog author="jzerebecki@suse.com" date="1630065600">- Update to version 0.0.3~git9.19e761b:
  * Add zypper-migration-plugin to package
  * Remove unused Error logger
  * Add missing doc strings to exported vars and funcs
  * Handle error after products sync api call
  * Make the CI check gofmt</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1638360000">- Update to version 0.0.4~git0.64b80e9:
  * Makefile: also run tests under ./suseconnect
  * Switch yast-test to upstream
  * Removed examples leftover from the POC phase
  * Add HA repo to get rubygem(ffi) before it's in the baseproduct
  * Add versions and lib deps
  * Post-review cleanup
  * Package libsuseconnect and shim
  * Align with yast-registration tests
  * Fix SSLCertificate mixins
  * Fix logger crash and restore mixin
  * Removed TODO item handled separately
  * Enable debug early
  * Add package search for YaST's "Online Search"
  * Clarify Repo fields
  * Export UpdateSystem()
  * Export SystemActivations()
  * Add migration functions
  * Fix handling of IsBase attribute
  * Add missing JSONError
  * Add list_installer_updates
  * Add "update certificates"
  * Add more specific errors
  * Improved SSL error handling
  * Init defaults for get_config()
  * Improved debug logging
  * Fix error scopes
  * Fix ApiError interface
  * Added DEFAULT_CREDENTIALS_DIR const
  * get proxy credentials from curlrc
  * Forward logs from Connect to YaST
  * Separate Info logger
  * Added more TODO items
  * Simplify Config object init
  * Map Repo and Config fields to JSON
  * Add remaining fields listed in addon.rb
  * Add product_type field to product
  * First working yast part
  * Add relative path support to credentials
  * Add steps to test from yast
  * Add yast create_credentials_file
  * Add CreateCredentials() method
  * Add yast credentials()
  * Add yast announce_system - WIP
  * Add MergeJSON method for Config
  * Add readme for YaST integration
  * Fix usage text
  * Add missing -g argument
  * Fix OBS CI, it now requires target
  * Add manpage placeholder
  * Simplify packageWanted()
  * Add sorting and grouping options
  * Add local repo search and duplicate removal
  * Add basic online package search
  * Update rpm spec for zypper-search-packages-plugin
  * Add CLI for zypper search-packages plugin
  * Optional base product in package search
  * Use DefaultTransport defaults + client timeout
  * Extract ReleaseType from zypper output
  * Print failed command on zypper error like the Ruby
  * Add package_search API wrapper
  * Allow de-register/de-activate a single product
  * Improve docstring for the Status struct
  * Always show subscription information if available
  * Refactor getStatuses() to ease testing
  * Add SUMA/Uyuni check
  * Fix status output order to follow zypper product xml
  * Change GetExtensionsList() to reduce calls
  * Add the subscription name to status output
  * allow --instance-data together with --regcode
  * Post-review cleanups
  * Add selfupdate functionality
  * Handle Leap -&gt; SLES migration scenario
  * Add offline migrations support
  * Change parse error string and add block comment
  * Add disabling of obsolete repos
  * Add zypper repos listing
  * Add interactive migration selection
  * Allow loading Config from any path
  * Remove dummy flag
  * Add snapper support
  * Add zypper backup/restore functions
  * Use connect.StringSet
  * Add --query option
  * Add product and break-my-system options
  * Add note on conflicting flags
  * Check for flag contradictions
  * Add echoing output of executed commands to console
  * Move product printing out of checkProducts()
  * Split --debug and --verbose
  * Add zypper dist-upgrade part
  * Split migration code
  * Extract migration sorting
  * Expose migration(Add|Remove)Service() functions
  * Trap SIGINT/SIGTERM
  * Add zypper.RefreshRepos()
  * Expose client.upgradeProduct()
  * Add --root parameter
  * Add --migration N parameter
  * Prepare available migrations
  * Add API call to get online migration paths
  * Add system products checking
  * Add quiet logger for easier --quiet handling
  * Add zypper migration plugin implementation.
  * Export toTriplet and installReleasePackage
  * Add basic string set implementation
  * Remove quiet param from execute() and zypperRun()
  * Simplify mocking of external commands</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1641556800">- Update to version 0.0.5~git0.bbb5544:
  * Switch from rubygem-ffi to fiddle
  * Cleanup services during migration (bsc#1161891)
  * Allow non-root users to see usage text
  * Add option to not fail dup as much
  * Move APIVersion declaration to file where it is used
  * Add flag to enable/disable hwinfo test
  * Add ARM cluster count to hwinfo and fix test
  * Simplify parsing JSON error response
  * Add --gpg-auto-import-keys for zypper ref
  * Rename main.go to logging.go
  * Fix typo
  * Remove init() from the connect package
  * Move CFG variable declaration to config.go
  * Move AppName const to the file where it is used
  * Use testing.Helper() in test helpers
  * Add ppc64le support
  * Disable UUID test
  * Add test tools to BuildRequires
  * Ignore UUID errors
  * Run basic hwinfo sanity test on build service
  * Update code comments to match shim behavior.
  * Remove dependency on systemd
  * Only run httputil DumpResponse when needed</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1643198400">- Update to version 0.0.6~git0.77933db:
  * Add man pages
  * Add note in DIFFERENCES.md about abbreviated flags
  * Add -l as an alias for --list-extensions
  * Add --clean as an alias for --cleanup (bsc#1195003)
  * Suppress expected error log message in TLS test
  * Add flag to import product repo keys (bsc#1174657)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
</package>
<package pkgid="a823f75a4d5959877772e6f14ee7a8a418e11f0359c550fcc072c88070507c90" name="suseconnect-ng" arch="src">
  <version epoch="0" ver="1.0.0~git0.faee7c196dc1" rel="150400.3.7.3"/>
  <changelog author="jzerebecki@suse.com" date="1626696000">- Update to version 0.0.1~git16.8a5d48c:
  * Add extensions hints for readonly root fs
  * Make the connect package an internal package
  * Document debug output destination difference
  * Add status value constants
  * Add rollback CLI option
  * Fix callHTTP() so connections are reused
  * Fix list-extensions format
  * Fix error from zypper refresh</changelog>
  <changelog author="jzerebecki@suse.com" date="1626955200">- Update to version 0.0.1~git33.b531281:
  * Run integration tests
  * Try to use localized error from server response
  * Write usage help to stdout like the Ruby version
  * Simplify list-extensions template
  * Fix call to create UUID on s390
  * Provides and Obsoletes SUSEConnect
  * Add extensions list tests
  * Fix calls to s390 read_values
  * Add build-s390 target to Makefile
  * hwinfo: don't fail if dmidecode is missing</changelog>
  <changelog author="jzerebecki@suse.com" date="1627041600">- Update to version 0.0.2~git0.ebef3b7:
  * Add --version
  * Fix list-extensions printing "Not available" when using SCC
  * Change --deregister to --de-register</changelog>
  <changelog author="jzerebecki@suse.com" date="1627387200">- Update to version 0.0.3~git0.dacdd3b:
  * Add gofmt target to Makefile
  * Fix gofmt errors
  * Add Requires that weren't explicit (bsc#1188646)
  * Use custom UnmarshalJSON() for the Product struct</changelog>
  <changelog author="jzerebecki@suse.com" date="1630065600">- Update to version 0.0.3~git9.19e761b:
  * Add zypper-migration-plugin to package
  * Remove unused Error logger
  * Add missing doc strings to exported vars and funcs
  * Handle error after products sync api call
  * Make the CI check gofmt</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1638360000">- Update to version 0.0.4~git0.64b80e9:
  * Makefile: also run tests under ./suseconnect
  * Switch yast-test to upstream
  * Removed examples leftover from the POC phase
  * Add HA repo to get rubygem(ffi) before it's in the baseproduct
  * Add versions and lib deps
  * Post-review cleanup
  * Package libsuseconnect and shim
  * Align with yast-registration tests
  * Fix SSLCertificate mixins
  * Fix logger crash and restore mixin
  * Removed TODO item handled separately
  * Enable debug early
  * Add package search for YaST's "Online Search"
  * Clarify Repo fields
  * Export UpdateSystem()
  * Export SystemActivations()
  * Add migration functions
  * Fix handling of IsBase attribute
  * Add missing JSONError
  * Add list_installer_updates
  * Add "update certificates"
  * Add more specific errors
  * Improved SSL error handling
  * Init defaults for get_config()
  * Improved debug logging
  * Fix error scopes
  * Fix ApiError interface
  * Added DEFAULT_CREDENTIALS_DIR const
  * get proxy credentials from curlrc
  * Forward logs from Connect to YaST
  * Separate Info logger
  * Added more TODO items
  * Simplify Config object init
  * Map Repo and Config fields to JSON
  * Add remaining fields listed in addon.rb
  * Add product_type field to product
  * First working yast part
  * Add relative path support to credentials
  * Add steps to test from yast
  * Add yast create_credentials_file
  * Add CreateCredentials() method
  * Add yast credentials()
  * Add yast announce_system - WIP
  * Add MergeJSON method for Config
  * Add readme for YaST integration
  * Fix usage text
  * Add missing -g argument
  * Fix OBS CI, it now requires target
  * Add manpage placeholder
  * Simplify packageWanted()
  * Add sorting and grouping options
  * Add local repo search and duplicate removal
  * Add basic online package search
  * Update rpm spec for zypper-search-packages-plugin
  * Add CLI for zypper search-packages plugin
  * Optional base product in package search
  * Use DefaultTransport defaults + client timeout
  * Extract ReleaseType from zypper output
  * Print failed command on zypper error like the Ruby
  * Add package_search API wrapper
  * Allow de-register/de-activate a single product
  * Improve docstring for the Status struct
  * Always show subscription information if available
  * Refactor getStatuses() to ease testing
  * Add SUMA/Uyuni check
  * Fix status output order to follow zypper product xml
  * Change GetExtensionsList() to reduce calls
  * Add the subscription name to status output
  * allow --instance-data together with --regcode
  * Post-review cleanups
  * Add selfupdate functionality
  * Handle Leap -&gt; SLES migration scenario
  * Add offline migrations support
  * Change parse error string and add block comment
  * Add disabling of obsolete repos
  * Add zypper repos listing
  * Add interactive migration selection
  * Allow loading Config from any path
  * Remove dummy flag
  * Add snapper support
  * Add zypper backup/restore functions
  * Use connect.StringSet
  * Add --query option
  * Add product and break-my-system options
  * Add note on conflicting flags
  * Check for flag contradictions
  * Add echoing output of executed commands to console
  * Move product printing out of checkProducts()
  * Split --debug and --verbose
  * Add zypper dist-upgrade part
  * Split migration code
  * Extract migration sorting
  * Expose migration(Add|Remove)Service() functions
  * Trap SIGINT/SIGTERM
  * Add zypper.RefreshRepos()
  * Expose client.upgradeProduct()
  * Add --root parameter
  * Add --migration N parameter
  * Prepare available migrations
  * Add API call to get online migration paths
  * Add system products checking
  * Add quiet logger for easier --quiet handling
  * Add zypper migration plugin implementation.
  * Export toTriplet and installReleasePackage
  * Add basic string set implementation
  * Remove quiet param from execute() and zypperRun()
  * Simplify mocking of external commands</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1641556800">- Update to version 0.0.5~git0.bbb5544:
  * Switch from rubygem-ffi to fiddle
  * Cleanup services during migration (bsc#1161891)
  * Allow non-root users to see usage text
  * Add option to not fail dup as much
  * Move APIVersion declaration to file where it is used
  * Add flag to enable/disable hwinfo test
  * Add ARM cluster count to hwinfo and fix test
  * Simplify parsing JSON error response
  * Add --gpg-auto-import-keys for zypper ref
  * Rename main.go to logging.go
  * Fix typo
  * Remove init() from the connect package
  * Move CFG variable declaration to config.go
  * Move AppName const to the file where it is used
  * Use testing.Helper() in test helpers
  * Add ppc64le support
  * Disable UUID test
  * Add test tools to BuildRequires
  * Ignore UUID errors
  * Run basic hwinfo sanity test on build service
  * Update code comments to match shim behavior.
  * Remove dependency on systemd
  * Only run httputil DumpResponse when needed</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1643198400">- Update to version 0.0.6~git0.77933db:
  * Add man pages
  * Add note in DIFFERENCES.md about abbreviated flags
  * Add -l as an alias for --list-extensions
  * Add --clean as an alias for --cleanup (bsc#1195003)
  * Suppress expected error log message in TLS test
  * Add flag to import product repo keys (bsc#1174657)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
</package>
<package pkgid="c812f540d5e60a88d0ba6c6cb13e620bec7b61413e23d9098e4a4d5b3d6fc452" name="suseconnect-ng" arch="x86_64">
  <version epoch="0" ver="1.0.0~git0.faee7c196dc1" rel="150400.3.7.3"/>
  <changelog author="jzerebecki@suse.com" date="1626696000">- Update to version 0.0.1~git16.8a5d48c:
  * Add extensions hints for readonly root fs
  * Make the connect package an internal package
  * Document debug output destination difference
  * Add status value constants
  * Add rollback CLI option
  * Fix callHTTP() so connections are reused
  * Fix list-extensions format
  * Fix error from zypper refresh</changelog>
  <changelog author="jzerebecki@suse.com" date="1626955200">- Update to version 0.0.1~git33.b531281:
  * Run integration tests
  * Try to use localized error from server response
  * Write usage help to stdout like the Ruby version
  * Simplify list-extensions template
  * Fix call to create UUID on s390
  * Provides and Obsoletes SUSEConnect
  * Add extensions list tests
  * Fix calls to s390 read_values
  * Add build-s390 target to Makefile
  * hwinfo: don't fail if dmidecode is missing</changelog>
  <changelog author="jzerebecki@suse.com" date="1627041600">- Update to version 0.0.2~git0.ebef3b7:
  * Add --version
  * Fix list-extensions printing "Not available" when using SCC
  * Change --deregister to --de-register</changelog>
  <changelog author="jzerebecki@suse.com" date="1627387200">- Update to version 0.0.3~git0.dacdd3b:
  * Add gofmt target to Makefile
  * Fix gofmt errors
  * Add Requires that weren't explicit (bsc#1188646)
  * Use custom UnmarshalJSON() for the Product struct</changelog>
  <changelog author="jzerebecki@suse.com" date="1630065600">- Update to version 0.0.3~git9.19e761b:
  * Add zypper-migration-plugin to package
  * Remove unused Error logger
  * Add missing doc strings to exported vars and funcs
  * Handle error after products sync api call
  * Make the CI check gofmt</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1638360000">- Update to version 0.0.4~git0.64b80e9:
  * Makefile: also run tests under ./suseconnect
  * Switch yast-test to upstream
  * Removed examples leftover from the POC phase
  * Add HA repo to get rubygem(ffi) before it's in the baseproduct
  * Add versions and lib deps
  * Post-review cleanup
  * Package libsuseconnect and shim
  * Align with yast-registration tests
  * Fix SSLCertificate mixins
  * Fix logger crash and restore mixin
  * Removed TODO item handled separately
  * Enable debug early
  * Add package search for YaST's "Online Search"
  * Clarify Repo fields
  * Export UpdateSystem()
  * Export SystemActivations()
  * Add migration functions
  * Fix handling of IsBase attribute
  * Add missing JSONError
  * Add list_installer_updates
  * Add "update certificates"
  * Add more specific errors
  * Improved SSL error handling
  * Init defaults for get_config()
  * Improved debug logging
  * Fix error scopes
  * Fix ApiError interface
  * Added DEFAULT_CREDENTIALS_DIR const
  * get proxy credentials from curlrc
  * Forward logs from Connect to YaST
  * Separate Info logger
  * Added more TODO items
  * Simplify Config object init
  * Map Repo and Config fields to JSON
  * Add remaining fields listed in addon.rb
  * Add product_type field to product
  * First working yast part
  * Add relative path support to credentials
  * Add steps to test from yast
  * Add yast create_credentials_file
  * Add CreateCredentials() method
  * Add yast credentials()
  * Add yast announce_system - WIP
  * Add MergeJSON method for Config
  * Add readme for YaST integration
  * Fix usage text
  * Add missing -g argument
  * Fix OBS CI, it now requires target
  * Add manpage placeholder
  * Simplify packageWanted()
  * Add sorting and grouping options
  * Add local repo search and duplicate removal
  * Add basic online package search
  * Update rpm spec for zypper-search-packages-plugin
  * Add CLI for zypper search-packages plugin
  * Optional base product in package search
  * Use DefaultTransport defaults + client timeout
  * Extract ReleaseType from zypper output
  * Print failed command on zypper error like the Ruby
  * Add package_search API wrapper
  * Allow de-register/de-activate a single product
  * Improve docstring for the Status struct
  * Always show subscription information if available
  * Refactor getStatuses() to ease testing
  * Add SUMA/Uyuni check
  * Fix status output order to follow zypper product xml
  * Change GetExtensionsList() to reduce calls
  * Add the subscription name to status output
  * allow --instance-data together with --regcode
  * Post-review cleanups
  * Add selfupdate functionality
  * Handle Leap -&gt; SLES migration scenario
  * Add offline migrations support
  * Change parse error string and add block comment
  * Add disabling of obsolete repos
  * Add zypper repos listing
  * Add interactive migration selection
  * Allow loading Config from any path
  * Remove dummy flag
  * Add snapper support
  * Add zypper backup/restore functions
  * Use connect.StringSet
  * Add --query option
  * Add product and break-my-system options
  * Add note on conflicting flags
  * Check for flag contradictions
  * Add echoing output of executed commands to console
  * Move product printing out of checkProducts()
  * Split --debug and --verbose
  * Add zypper dist-upgrade part
  * Split migration code
  * Extract migration sorting
  * Expose migration(Add|Remove)Service() functions
  * Trap SIGINT/SIGTERM
  * Add zypper.RefreshRepos()
  * Expose client.upgradeProduct()
  * Add --root parameter
  * Add --migration N parameter
  * Prepare available migrations
  * Add API call to get online migration paths
  * Add system products checking
  * Add quiet logger for easier --quiet handling
  * Add zypper migration plugin implementation.
  * Export toTriplet and installReleasePackage
  * Add basic string set implementation
  * Remove quiet param from execute() and zypperRun()
  * Simplify mocking of external commands</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1641556800">- Update to version 0.0.5~git0.bbb5544:
  * Switch from rubygem-ffi to fiddle
  * Cleanup services during migration (bsc#1161891)
  * Allow non-root users to see usage text
  * Add option to not fail dup as much
  * Move APIVersion declaration to file where it is used
  * Add flag to enable/disable hwinfo test
  * Add ARM cluster count to hwinfo and fix test
  * Simplify parsing JSON error response
  * Add --gpg-auto-import-keys for zypper ref
  * Rename main.go to logging.go
  * Fix typo
  * Remove init() from the connect package
  * Move CFG variable declaration to config.go
  * Move AppName const to the file where it is used
  * Use testing.Helper() in test helpers
  * Add ppc64le support
  * Disable UUID test
  * Add test tools to BuildRequires
  * Ignore UUID errors
  * Run basic hwinfo sanity test on build service
  * Update code comments to match shim behavior.
  * Remove dependency on systemd
  * Only run httputil DumpResponse when needed</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1643198400">- Update to version 0.0.6~git0.77933db:
  * Add man pages
  * Add note in DIFFERENCES.md about abbreviated flags
  * Add -l as an alias for --list-extensions
  * Add --clean as an alias for --cleanup (bsc#1195003)
  * Suppress expected error log message in TLS test
  * Add flag to import product repo keys (bsc#1174657)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1648123200">- Update to version 0.0.7~git0.3ef988e:
  * Fix product tree traversal (bsc#1197398)
  * Revert "Remove self from LD_PRELOAD (bsc#1196326)"
  * Remove self from LD_PRELOAD (bsc#1196326)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1649851200">- Update to version 0.0.8~git0.16545bf:
  * Allow reloading CA certs pool (bsc#1195220)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1650456000">- Update to version 0.0.8~git2.368ea44:
  * go1.18 compatibility: BuildRequires:git</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1659700800">- Update to version 0.0.9~git5.75890b6:
  * Don't run keepalive on reboot
  * Use system-wide proxy settings (bsc#1200994)
  * Add customer information about keepalive calls
  * Add timer for SUSEConnect --keepalive (bsc#1196076)
  * Add --keepalive to manpage
  * Added support for the System-Token header
  * Add Keepalive command line option
  * Print nested zypper errors (bsc#1200803)
  * Fix migration json error with SMT (bsc#1198625)
  * Add option to run local scc tests
  * Switch to jenkins-hosted credentials
  * Fix "VCS stamping" problem
  * Add missing import
  * Remove redundant code + add comment</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1661947200">- Update to version 0.0.9~git8.f9adb71:
  * Use standard buildconditionals
  * Strip the binaries (saves ~ 30%)</changelog>
  <changelog author="msabate@suse.com" date="1662984000">- Update to version 0.0.9~git10.de887da7231f:
  * Respect the PROXY_ENABLED environment variable</changelog>
  <changelog author="jtomasiak@suse.com" date="1663243200">- Update to version 0.0.10~git0.5f84106:
  * Fix System-Token support in ruby binding (bsc#1203341)
  * Added the PACKAGE.md file</changelog>
  <changelog author="jtomasiak@suse.com" date="1665144000">- Update to version 0.0.10~git2.ee561b8:
  * Drop .git from tar</changelog>
  <changelog author="msabate@suse.com" date="1666958400">- Update to version 1.0.0~git0.60e48564a714 (bsc#1204821):
  * packaging: obsolete suseconnect &lt; 1.0.0
  * packaging: don't end the summary with a dot</changelog>
  <changelog author="msabate@suse.com" date="1667908800">- Update to version v1.0~git0.32cac3fb5047:
  * packaging: 1.0.0 -&gt; 1.0</changelog>
  <changelog author="msabate@suse.com" date="1667908801">- Update to version 1.0.0~git0.faee7c196dc1:
  * Revert "packaging: 1.0.0 -&gt; 1.0"</changelog>
</package>
<package pkgid="f1f2f625ff94de2544854c090923d207fdc1bb82f0ab7d9b18b88aa620e684f1" name="system-group-audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="11c6553e44ec62e6a65ffd1a4936173d5fb6c668da0ceb53f359d07c0ae1592a" name="system-group-audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="8a88b99bddf7f8106eadb33e0b9b56067430df0b7e66a96478fff2dc549a0977" name="tar" arch="aarch64">
  <version epoch="0" ver="1.34" rel="150000.3.22.3"/>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
  <changelog author="kstreitova@suse.com" date="1550145600">- update to version 1.31
  * Fix heap-buffer-overrun with --one-top-level, bug introduced
    with the addition of that option in 1.28
  * Support for zstd compression
  * New option '--zstd' instructs tar to use zstd as compression
    program. When listing, extractng and comparing, zstd compressed
    archives are recognized automatically. When '-a' option is in
    effect, zstd compression is selected if the destination archive
    name ends in '.zst' or '.tzst'.
  * The -K option interacts properly with member names given in the
    command line. Names of members to extract can be specified along
    with the "-K NAME" option. In this case, tar will extract NAME
    and those of named members that appear in the archive after it,
    which is consistent with the semantics of the option. Previous
    versions of tar extracted NAME, those of named members that
    appeared before it, and everything after it.
  * Fix CVE-2018-20482 - When creating archives with the --sparse
    option, previous versions of tar would loop endlessly if a
    sparse file had been truncated while being archived.
- remove the following patches (upstreamed)
  * tar-1.30-tests-difflink.patch
  * tar-1.30-tests_dirrem_race.patch
- refresh add_readme-tests.patch
- add tar-1.31-tests_dirrem.patch to fix expected output in dirrem
  tests
- add tar-1.31-racy_compress_tests.patch to fix compression tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1552651200">- Remove libattr-devel from buildrequires, tar no longer uses
  it but finds xattr functions in libc.</changelog>
  <changelog author="kstreitova@suse.com" date="1553515200">- update to version 1.32
  * Fix the use of --checkpoint without explicit --checkpoint-action
  * Fix extraction with the -U option
  * Fix iconv usage on BSD-based systems
  * Fix possible NULL dereference (savannah bug #55369)
    [bsc#1130496] [CVE-2019-9923]
  * Improve the testsuite
- remove tar-1.31-tests_dirrem.patch and
  tar-1.31-racy_compress_tests.patch that are no longer needed
  (applied usptream)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585915200">- Drop Requires(pre) info in the preamble: the main package does
  not contain any info files, and has not even a pre script. The
  - doc subpackage already has the correct deps.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193600">- GNU tar 1.33:
  * POSIX extended format headers do not include PID by default
  * --delay-directory-restore works for archives with reversed
    member ordering
  * Fix extraction of a symbolic link hardlinked to another
    symbolic link
  * Wildcards in exclude-vcs-ignore mode don't match slash
  * Fix the --no-overwrite-dir option
  * Fix handling of chained renames in incremental backups
  * Link counting works for file names supplied with -T
  * Accept only position-sensitive (file-selection) options in file
    list files
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- GNU tar 1.34:
  * Fix extraction over pipe
  * Fix memory leak in read_header
  * Fix extraction when . and .. are unreadable
  * Gracefully handle duplicate symlinks when extracting
  * Re-initialize supplementary groups when switching to user
    privileges</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link /var/lib/tests/tar/bin/genfile as Position-Independent Executable
  (bsc#1184124).
  + tar-PIE.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  * bsc#1181131, CVE-2021-20193
  * bsc#1120610</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1634212800">- tests-skip-time01-on-32bit-time_t.patch: Add patch to skip test
  'tests/time01.at' on platforms with 32-bit time_t for now.
- tar.spec: Reference it.
  (%check): Output the testsuite.log in case the testsuite failed.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667217600">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
</package>
<package pkgid="015beb7bf6e0877cc6f6f4995cfced9ed94d529141cdf6e515c11c6e4228570a" name="tar" arch="src">
  <version epoch="0" ver="1.34" rel="150000.3.22.3"/>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
  <changelog author="kstreitova@suse.com" date="1550145600">- update to version 1.31
  * Fix heap-buffer-overrun with --one-top-level, bug introduced
    with the addition of that option in 1.28
  * Support for zstd compression
  * New option '--zstd' instructs tar to use zstd as compression
    program. When listing, extractng and comparing, zstd compressed
    archives are recognized automatically. When '-a' option is in
    effect, zstd compression is selected if the destination archive
    name ends in '.zst' or '.tzst'.
  * The -K option interacts properly with member names given in the
    command line. Names of members to extract can be specified along
    with the "-K NAME" option. In this case, tar will extract NAME
    and those of named members that appear in the archive after it,
    which is consistent with the semantics of the option. Previous
    versions of tar extracted NAME, those of named members that
    appeared before it, and everything after it.
  * Fix CVE-2018-20482 - When creating archives with the --sparse
    option, previous versions of tar would loop endlessly if a
    sparse file had been truncated while being archived.
- remove the following patches (upstreamed)
  * tar-1.30-tests-difflink.patch
  * tar-1.30-tests_dirrem_race.patch
- refresh add_readme-tests.patch
- add tar-1.31-tests_dirrem.patch to fix expected output in dirrem
  tests
- add tar-1.31-racy_compress_tests.patch to fix compression tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1552651200">- Remove libattr-devel from buildrequires, tar no longer uses
  it but finds xattr functions in libc.</changelog>
  <changelog author="kstreitova@suse.com" date="1553515200">- update to version 1.32
  * Fix the use of --checkpoint without explicit --checkpoint-action
  * Fix extraction with the -U option
  * Fix iconv usage on BSD-based systems
  * Fix possible NULL dereference (savannah bug #55369)
    [bsc#1130496] [CVE-2019-9923]
  * Improve the testsuite
- remove tar-1.31-tests_dirrem.patch and
  tar-1.31-racy_compress_tests.patch that are no longer needed
  (applied usptream)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585915200">- Drop Requires(pre) info in the preamble: the main package does
  not contain any info files, and has not even a pre script. The
  - doc subpackage already has the correct deps.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193600">- GNU tar 1.33:
  * POSIX extended format headers do not include PID by default
  * --delay-directory-restore works for archives with reversed
    member ordering
  * Fix extraction of a symbolic link hardlinked to another
    symbolic link
  * Wildcards in exclude-vcs-ignore mode don't match slash
  * Fix the --no-overwrite-dir option
  * Fix handling of chained renames in incremental backups
  * Link counting works for file names supplied with -T
  * Accept only position-sensitive (file-selection) options in file
    list files
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- GNU tar 1.34:
  * Fix extraction over pipe
  * Fix memory leak in read_header
  * Fix extraction when . and .. are unreadable
  * Gracefully handle duplicate symlinks when extracting
  * Re-initialize supplementary groups when switching to user
    privileges</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link /var/lib/tests/tar/bin/genfile as Position-Independent Executable
  (bsc#1184124).
  + tar-PIE.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  * bsc#1181131, CVE-2021-20193
  * bsc#1120610</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1634212800">- tests-skip-time01-on-32bit-time_t.patch: Add patch to skip test
  'tests/time01.at' on platforms with 32-bit time_t for now.
- tar.spec: Reference it.
  (%check): Output the testsuite.log in case the testsuite failed.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667217600">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
</package>
<package pkgid="71ae127229414f6b32b2e18b29b488bd66ad5209a7e36b416192b18eaf561add" name="tar" arch="x86_64">
  <version epoch="0" ver="1.34" rel="150000.3.22.3"/>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
  <changelog author="kstreitova@suse.com" date="1550145600">- update to version 1.31
  * Fix heap-buffer-overrun with --one-top-level, bug introduced
    with the addition of that option in 1.28
  * Support for zstd compression
  * New option '--zstd' instructs tar to use zstd as compression
    program. When listing, extractng and comparing, zstd compressed
    archives are recognized automatically. When '-a' option is in
    effect, zstd compression is selected if the destination archive
    name ends in '.zst' or '.tzst'.
  * The -K option interacts properly with member names given in the
    command line. Names of members to extract can be specified along
    with the "-K NAME" option. In this case, tar will extract NAME
    and those of named members that appear in the archive after it,
    which is consistent with the semantics of the option. Previous
    versions of tar extracted NAME, those of named members that
    appeared before it, and everything after it.
  * Fix CVE-2018-20482 - When creating archives with the --sparse
    option, previous versions of tar would loop endlessly if a
    sparse file had been truncated while being archived.
- remove the following patches (upstreamed)
  * tar-1.30-tests-difflink.patch
  * tar-1.30-tests_dirrem_race.patch
- refresh add_readme-tests.patch
- add tar-1.31-tests_dirrem.patch to fix expected output in dirrem
  tests
- add tar-1.31-racy_compress_tests.patch to fix compression tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1552651200">- Remove libattr-devel from buildrequires, tar no longer uses
  it but finds xattr functions in libc.</changelog>
  <changelog author="kstreitova@suse.com" date="1553515200">- update to version 1.32
  * Fix the use of --checkpoint without explicit --checkpoint-action
  * Fix extraction with the -U option
  * Fix iconv usage on BSD-based systems
  * Fix possible NULL dereference (savannah bug #55369)
    [bsc#1130496] [CVE-2019-9923]
  * Improve the testsuite
- remove tar-1.31-tests_dirrem.patch and
  tar-1.31-racy_compress_tests.patch that are no longer needed
  (applied usptream)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585915200">- Drop Requires(pre) info in the preamble: the main package does
  not contain any info files, and has not even a pre script. The
  - doc subpackage already has the correct deps.</changelog>
  <changelog author="lnussel@suse.de" date="1603108800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193600">- GNU tar 1.33:
  * POSIX extended format headers do not include PID by default
  * --delay-directory-restore works for archives with reversed
    member ordering
  * Fix extraction of a symbolic link hardlinked to another
    symbolic link
  * Wildcards in exclude-vcs-ignore mode don't match slash
  * Fix the --no-overwrite-dir option
  * Fix handling of chained renames in incremental backups
  * Link counting works for file names supplied with -T
  * Accept only position-sensitive (file-selection) options in file
    list files
- remove deprecated texinfo packaging macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- GNU tar 1.34:
  * Fix extraction over pipe
  * Fix memory leak in read_header
  * Fix extraction when . and .. are unreadable
  * Gracefully handle duplicate symlinks when extracting
  * Re-initialize supplementary groups when switching to user
    privileges</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link /var/lib/tests/tar/bin/genfile as Position-Independent Executable
  (bsc#1184124).
  + tar-PIE.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  * bsc#1181131, CVE-2021-20193
  * bsc#1120610</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1634212800">- tests-skip-time01-on-32bit-time_t.patch: Add patch to skip test
  'tests/time01.at' on platforms with 32-bit time_t for now.
- tar.spec: Reference it.
  (%check): Output the testsuite.log in case the testsuite failed.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1655726400">- Fix race condition while creating intermediate subdirectories,
  bsc#1200657
  * bsc1200657.patch</changelog>
  <changelog author="sflees@suse.de" date="1660737600">- bsc1200657.patch was previously incomplete leading to deadlocks
  * bsc#1202436
  * bsc1200657.patch updated</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667217600">- Fix unexpected inconsistency when making directory, bsc#1203600
  * tar-avoid-overflow-in-symlinks-tests.patch
  * tar-fix-extract-unlink.patch
- Update race condition fix, bsc#1200657
  * tar-fix-race-condition.patch
- Refresh bsc1200657.patch</changelog>
</package>
<package pkgid="8107e629c6be218b981e0562cb3fc1c7791957d89e7fdf2de577a418f060c971" name="tiff" arch="src">
  <version epoch="0" ver="4.0.9" rel="150000.45.19.1"/>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
</package>
<package pkgid="ce20e4dc38f4e3f63d1f4d374137779bd03da62398dbe30f065f41b6b399bd21" name="update-alternatives" arch="aarch64">
  <version epoch="0" ver="1.19.0.4" rel="150000.4.4.1"/>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 1.17.23
  + Use a matching group instead of ${^MATCH} in s/// in dselect build script.
  + Skip tar extractor tests if tar is not GNU tar &gt;= 1.27.
  + Reset the trigger cycle tracking on unsatisfied dependencies during
    trigger processing. Closes: bdo#771730
  + Fix out-of-bounds buffer read accesses when parsing field and trigger
    names or checking package ownership of conffiles and directories.
  + Add versioned Breaks on packages creating trigger cycles. Namely auctex,
    apt-cudf, ccache, cups, distcc, fusionforge-plugin-mediawiki, gap-core,
    gxine, hoogle, icecc, libjs-protoaculous, mcollective, pypy, wordpress
    and xfonts-traditional.
  + Update translations
- Remove unapplied patches; SLE11 support is disabled in project home
  + dpkg-pod2man-no-utf8.patch
  + dpkg-old-File-Path.patch
  + dpkg-old-Test-More.patch
- Remove obsolete patches
  * dpkg-ppc64le.diff
  * dpkg-archive_tar_format_gnu.patch
  * dpkg-archtable-suse.patch
- Rename updated patch
  pdate-alternatives-1.16.8-suse.patch &gt; pdate-alternatives-suse.patch
- Clean up a bit specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1427889600">- Update to 1.11.24:
  * Translation updates
  * Various small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1427889601">- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1433419200">- Verion bump to 1.18.1:
  * Bump to latest upstream release
  * Plenty of fixes with too long changelog, see changelog file in
    documentation
  * Also fixes bnc#926749 CVE-2015-0840
  * Refresh patch:
    + update-alternatives-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1433505600">- Adjust to the new manpage location</changelog>
  <changelog author="tchvatal@suse.com" date="1458907200">- Update to the 1.18.4:
  * Rebase patch update-alternatives-suse.patch
  * Touch the gost file in post</changelog>
  <changelog author="tchvatal@suse.com" date="1459944000">- The logfile for update-alternatives is /var/log/alternatives.log
  so stop using update-alternatives.log file which is empty</changelog>
  <changelog author="tchvatal@suse.com" date="1459944001">- Fix bnc#969171 by updating even with equal priority
  * 0001-In-case-of-equal-priority-rather-update.patch
- Try to autorefresh all the alternatives in post in case some of
  them were broken</changelog>
  <changelog author="tchvatal@suse.com" date="1463140800">- Provide alternatives binary and alternatives = %{version} symbol</changelog>
  <changelog author="tchvatal@suse.com" date="1464696000">- Require touch in post phase bnc#982336</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Use ls . instead of * to avoid error when nothing is in alternatives
  directory</changelog>
  <changelog author="tchvatal@suse.com" date="1473249601">- Version update to 1.18.10:
  * Various few fixes, see changelog file in the package
  * Refresh patch update-alternatives-suse.patch
  * Remove patch dpkg-sparc.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 1.18.23:
  * Various small fixes and memleaks removed
- Make sure to generate manpage
- Refresh patch update-alternatives-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Silence the update-alternatives regen output wrt bsc#1050848
  it causes more confusion than benefits</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Use dbpath macro for locationg rpm state directory
- Require exactly same version of rpm we had when building to make
  sure dbpath matches</changelog>
  <changelog author="mpluskal@suse.com" date="1511179200">- Move update alternatives database to new location
- Update rpm requirements to avoid unnecessary builds</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Migrate u-a data from /var/lib/rpm instead of relying on dbpath:
  no u-a version ever installed files explicitly into dbpath, but
  always hard specified /var/lib/rpm. The fact that RPM moved its
  database is irrelevant to update-alternatives. In case RPM moved
  it's database, our files are still accessible via the
  /var/lib/rpm symlink being put in place.
- Drop the arbitrary depenency on a specific rpm version: the idea
  was to ensure to have an rpm with the new dbpath location in
  place. For one, the dependency does not work as intended, and
  2nd, as the migration now happens explicitly from the old u-a
  admindir without relying on dbpath, is no longer needed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516104000">- Update to 1.19.0.4:
  * No changes in update-alternatives just match step with dpkg
- Drop patch 0001-In-case-of-equal-priority-rather-update.patch
  * Causes issues on too eagerly regenerating stuff bsc#1075971
  * Reason for this patch should no longer be needed as all python
    packages are singlespec
  * Also drop the post override</changelog>
  <changelog author="pgajdos@suse.com" date="1644580800">- break bash &lt;-&gt; update-alternatives cycle by coolo's rewrite
  of %post in lua [bsc#1195654]</changelog>
</package>
<package pkgid="6b8fa5db0c68cd65e7aa4f3b9b703af36d147cd947f3a617fa8ae808ac4c36ca" name="update-alternatives" arch="src">
  <version epoch="0" ver="1.19.0.4" rel="150000.4.4.1"/>
  <changelog author="tchvatal@suse.com" date="1399896000">- Use SUSE not SuSE.</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 1.17.23
  + Use a matching group instead of ${^MATCH} in s/// in dselect build script.
  + Skip tar extractor tests if tar is not GNU tar &gt;= 1.27.
  + Reset the trigger cycle tracking on unsatisfied dependencies during
    trigger processing. Closes: bdo#771730
  + Fix out-of-bounds buffer read accesses when parsing field and trigger
    names or checking package ownership of conffiles and directories.
  + Add versioned Breaks on packages creating trigger cycles. Namely auctex,
    apt-cudf, ccache, cups, distcc, fusionforge-plugin-mediawiki, gap-core,
    gxine, hoogle, icecc, libjs-protoaculous, mcollective, pypy, wordpress
    and xfonts-traditional.
  + Update translations
- Remove unapplied patches; SLE11 support is disabled in project home
  + dpkg-pod2man-no-utf8.patch
  + dpkg-old-File-Path.patch
  + dpkg-old-Test-More.patch
- Remove obsolete patches
  * dpkg-ppc64le.diff
  * dpkg-archive_tar_format_gnu.patch
  * dpkg-archtable-suse.patch
- Rename updated patch
  pdate-alternatives-1.16.8-suse.patch &gt; pdate-alternatives-suse.patch
- Clean up a bit specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1427889600">- Update to 1.11.24:
  * Translation updates
  * Various small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1427889601">- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1433419200">- Verion bump to 1.18.1:
  * Bump to latest upstream release
  * Plenty of fixes with too long changelog, see changelog file in
    documentation
  * Also fixes bnc#926749 CVE-2015-0840
  * Refresh patch:
    + update-alternatives-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1433505600">- Adjust to the new manpage location</changelog>
  <changelog author="tchvatal@suse.com" date="1458907200">- Update to the 1.18.4:
  * Rebase patch update-alternatives-suse.patch
  * Touch the gost file in post</changelog>
  <changelog author="tchvatal@suse.com" date="1459944000">- The logfile for update-alternatives is /var/log/alternatives.log
  so stop using update-alternatives.log file which is empty</changelog>
  <changelog author="tchvatal@suse.com" date="1459944001">- Fix bnc#969171 by updating even with equal priority
  * 0001-In-case-of-equal-priority-rather-update.patch
- Try to autorefresh all the alternatives in post in case some of
  them were broken</changelog>
  <changelog author="tchvatal@suse.com" date="1463140800">- Provide alternatives binary and alternatives = %{version} symbol</changelog>
  <changelog author="tchvatal@suse.com" date="1464696000">- Require touch in post phase bnc#982336</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Use ls . instead of * to avoid error when nothing is in alternatives
  directory</changelog>
  <changelog author="tchvatal@suse.com" date="1473249601">- Version update to 1.18.10:
  * Various few fixes, see changelog file in the package
  * Refresh patch update-alternatives-suse.patch
  * Remove patch dpkg-sparc.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 1.18.23:
  * Various small fixes and memleaks removed
- Make sure to generate manpage
- Refresh patch update-alternatives-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Silence the update-alternatives regen output wrt bsc#1050848
  it causes more confusion than benefits</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Use dbpath macro for locationg rpm state directory
- Require exactly same version of rpm we had when building to make
  sure dbpath matches</changelog>
  <changelog author="mpluskal@suse.com" date="1511179200">- Move update alternatives database to new location
- Update rpm requirements to avoid unnecessary builds</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Migrate u-a data from /var/lib/rpm instead of relying on dbpath:
  no u-a version ever installed files explicitly into dbpath, but
  always hard specified /var/lib/rpm. The fact that RPM moved its
  database is irrelevant to update-alternatives. In case RPM moved
  it's database, our files are still accessible via the
  /var/lib/rpm symlink being put in place.
- Drop the arbitrary depenency on a specific rpm version: the idea
  was to ensure to have an rpm with the new dbpath location in
  place. For one, the dependency does not work as intended, and
  2nd, as the migration now happens explicitly from the old u-a
  admindir without relying on dbpath, is no longer needed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516104000">- Update to 1.19.0.4:
  * No changes in update-alternatives just match step with dpkg
- Drop patch 0001-In-case-of-equal-priority-rather-update.patch
  * Causes issues on too eagerly regenerating stuff bsc#1075971
  * Reason for this patch should no longer be needed as all python
    packages are singlespec
  * Also drop the post override</changelog>
  <changelog author="pgajdos@suse.com" date="1644580800">- break bash &lt;-&gt; update-alternatives cycle by coolo's rewrite
  of %post in lua [bsc#1195654]</changelog>
</package>
<package pkgid="908392e61a0da1c7728e1a9cd56a5966c178b05c0ff703c4247d31af2294fc46" name="update-alternatives" arch="x86_64">
  <version epoch="0" ver="1.19.0.4" rel="150000.4.4.1"/>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 1.17.23
  + Use a matching group instead of ${^MATCH} in s/// in dselect build script.
  + Skip tar extractor tests if tar is not GNU tar &gt;= 1.27.
  + Reset the trigger cycle tracking on unsatisfied dependencies during
    trigger processing. Closes: bdo#771730
  + Fix out-of-bounds buffer read accesses when parsing field and trigger
    names or checking package ownership of conffiles and directories.
  + Add versioned Breaks on packages creating trigger cycles. Namely auctex,
    apt-cudf, ccache, cups, distcc, fusionforge-plugin-mediawiki, gap-core,
    gxine, hoogle, icecc, libjs-protoaculous, mcollective, pypy, wordpress
    and xfonts-traditional.
  + Update translations
- Remove unapplied patches; SLE11 support is disabled in project home
  + dpkg-pod2man-no-utf8.patch
  + dpkg-old-File-Path.patch
  + dpkg-old-Test-More.patch
- Remove obsolete patches
  * dpkg-ppc64le.diff
  * dpkg-archive_tar_format_gnu.patch
  * dpkg-archtable-suse.patch
- Rename updated patch
  pdate-alternatives-1.16.8-suse.patch &gt; pdate-alternatives-suse.patch
- Clean up a bit specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1427889600">- Update to 1.11.24:
  * Translation updates
  * Various small fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1427889601">- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1433419200">- Verion bump to 1.18.1:
  * Bump to latest upstream release
  * Plenty of fixes with too long changelog, see changelog file in
    documentation
  * Also fixes bnc#926749 CVE-2015-0840
  * Refresh patch:
    + update-alternatives-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1433505600">- Adjust to the new manpage location</changelog>
  <changelog author="tchvatal@suse.com" date="1458907200">- Update to the 1.18.4:
  * Rebase patch update-alternatives-suse.patch
  * Touch the gost file in post</changelog>
  <changelog author="tchvatal@suse.com" date="1459944000">- The logfile for update-alternatives is /var/log/alternatives.log
  so stop using update-alternatives.log file which is empty</changelog>
  <changelog author="tchvatal@suse.com" date="1459944001">- Fix bnc#969171 by updating even with equal priority
  * 0001-In-case-of-equal-priority-rather-update.patch
- Try to autorefresh all the alternatives in post in case some of
  them were broken</changelog>
  <changelog author="tchvatal@suse.com" date="1463140800">- Provide alternatives binary and alternatives = %{version} symbol</changelog>
  <changelog author="tchvatal@suse.com" date="1464696000">- Require touch in post phase bnc#982336</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Use ls . instead of * to avoid error when nothing is in alternatives
  directory</changelog>
  <changelog author="tchvatal@suse.com" date="1473249601">- Version update to 1.18.10:
  * Various few fixes, see changelog file in the package
  * Refresh patch update-alternatives-suse.patch
  * Remove patch dpkg-sparc.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 1.18.23:
  * Various small fixes and memleaks removed
- Make sure to generate manpage
- Refresh patch update-alternatives-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Silence the update-alternatives regen output wrt bsc#1050848
  it causes more confusion than benefits</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Use dbpath macro for locationg rpm state directory
- Require exactly same version of rpm we had when building to make
  sure dbpath matches</changelog>
  <changelog author="mpluskal@suse.com" date="1511179200">- Move update alternatives database to new location
- Update rpm requirements to avoid unnecessary builds</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Migrate u-a data from /var/lib/rpm instead of relying on dbpath:
  no u-a version ever installed files explicitly into dbpath, but
  always hard specified /var/lib/rpm. The fact that RPM moved its
  database is irrelevant to update-alternatives. In case RPM moved
  it's database, our files are still accessible via the
  /var/lib/rpm symlink being put in place.
- Drop the arbitrary depenency on a specific rpm version: the idea
  was to ensure to have an rpm with the new dbpath location in
  place. For one, the dependency does not work as intended, and
  2nd, as the migration now happens explicitly from the old u-a
  admindir without relying on dbpath, is no longer needed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516104000">- Update to 1.19.0.4:
  * No changes in update-alternatives just match step with dpkg
- Drop patch 0001-In-case-of-equal-priority-rather-update.patch
  * Causes issues on too eagerly regenerating stuff bsc#1075971
  * Reason for this patch should no longer be needed as all python
    packages are singlespec
  * Also drop the post override</changelog>
  <changelog author="pgajdos@suse.com" date="1644580800">- break bash &lt;-&gt; update-alternatives cycle by coolo's rewrite
  of %post in lua [bsc#1195654]</changelog>
</package>
<package pkgid="1877d76255e12ac7f6f24acf53e52361c9005c9509c93e003b70f4b167ccf9be" name="vim" arch="src">
  <version epoch="0" ver="9.0.0814" rel="150000.5.28.1"/>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
</package>
<package pkgid="c7d13b7b72a00f7543f2fb5627e318623f88fd27abc6089646e98c6c542acdc0" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="9.0.0814" rel="150000.5.28.1"/>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
</package>
<package pkgid="c7176bd7cfc5708afa2a39b57fd40d237a2b003077b90f8acfb1e7af496c047a" name="vim-small" arch="aarch64">
  <version epoch="0" ver="9.0.0814" rel="150000.5.28.1"/>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
</package>
<package pkgid="97f48867c672998c803b9f5acc14f7a76137cbab206f5952cff5f0bc8db75d8e" name="vim-small" arch="x86_64">
  <version epoch="0" ver="9.0.0814" rel="150000.5.28.1"/>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
  <changelog author="zbalogh@suse.com" date="1654776000">- Deleted patches:
  * restrict-shell-commands.patch
  * source-check-sandbox.patch
  * vim-8.0.1568-CVE-2021-3778.patch
  * vim-8.0.1568-CVE-2021-3796.patch
  * vim-8.0.1568-CVE-2021-3872.patch
  * vim-8.0.1568-CVE-2021-3927.patch
  * vim-8.0.1568-CVE-2021-3928.patch
  * vim-8.0.1568-CVE-2021-3984.patch
  * vim-8.0.1568-CVE-2021-4019.patch
  * vim-8.0.1568-CVE-2021-4193.patch
  * vim-8.0.1568-CVE-2021-46059.patch
  * vim-8.0.1568-CVE-2022-0319.patch
  * vim-8.0.1568-CVE-2022-0351.patch
  * vim-8.0.1568-CVE-2022-0361.patch
  * vim-8.0.1568-CVE-2022-0413.patch
  * vim-8.0.1568-globalvimrc.patch
- Added patches:
  * vim-8.1.0297-dump3.patch
  * vim-8.2.2411-globalvimrc.patch
  * disable-unreliable-tests-arch.patch
- Updated patches:
  * disable-unreliable-tests.patch
  * vim-7.3-filetype_changes.patch
  * vim-7.3-filetype_ftl.patch
  * vim-7.3-filetype_spec.patch
  * vim-7.3-gvimrc_fontset.patch
  * vim-7.3-help_tags.patch
  * vim-7.3-mktemp_tutor.patch
  * vim-7.3-name_vimrc.patch
  * vim-7.3-sh_is_bash.patch
  * vim-7.3-use_awk.patch
  * vim-7.4-disable_lang_no.patch
  * vim-7.4-filetype_apparmor.patch
  * vim-7.4-filetype_mine.patch
  * vim-7.4-highlight_fstab.patch
  * vim-8.0-ttytype-test.patch
  * vim-8.0.1568-defaults.patch
  * vim73-no-static-libpython.patch
- Updated to version 8.2 with patch level 5038, fixes the following problems
  * Fixing bsc#1191770 VUL-0: CVE-2021-3875: vim: heap-based buffer overflow
  * Fixing bsc#1192167 VUL-0: CVE-2021-3903: vim: heap-based buffer overflow
  * Fixing bsc#1192902 VUL-0: CVE-2021-3968: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192903 VUL-0: CVE-2021-3973: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1192904 VUL-0: CVE-2021-3974: vim: vim is vulnerable to Use
    After Free
  * Fixing bsc#1193466 VUL-1: CVE-2021-4069: vim: use-after-free in ex_open()
    in src/ex_docmd.c
  * Fixing bsc#1193905 VUL-0: CVE-2021-4136: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1194093 VUL-1: CVE-2021-4166: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194216 VUL-1: CVE-2021-4193: vim: vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1194217 VUL-0: CVE-2021-4192: vim: vulnerable to Use After Free
  * Fixing bsc#1194872 VUL-0: CVE-2022-0261: vim: Heap-based Buffer Overflow
    in vim prior to 8.2.
  * Fixing bsc#1194885 VUL-0: CVE-2022-0213: vim: vim is vulnerable to
    Heap-based Buffer Overflow
  * Fixing bsc#1195004 VUL-0: CVE-2022-0318: vim: Heap-based Buffer Overflow in
    vim prior to 8.2.
  * Fixing bsc#1195203 VUL-0: CVE-2022-0359: vim: heap-based buffer overflow in
    init_ccline() in ex_getln.c
  * Fixing bsc#1195354 VUL-0: CVE-2022-0407: vim: Heap-based Buffer Overflow in
    Conda vim prior to 8.2.
  * Fixing bsc#1198596 VUL-0: CVE-2022-1381: vim: global heap buffer overflow
    in skip_range
  * Fixing bsc#1199331 VUL-0: CVE-2022-1616: vim: Use after free in
    append_command
  * Fixing bsc#1199333 VUL-0: CVE-2022-1619: vim: Heap-based Buffer Overflow in
    function cmdline_erase_chars
  * Fixing bsc#1199334 VUL-0: CVE-2022-1620: vim: NULL Pointer Dereference in
    function vim_regexec_string
  * Fixing bsc#1199747 VUL-0: CVE-2022-1796: vim: Use After in
    find_pattern_in_path
  * Fixing bsc#1200010 VUL-0: CVE-2022-1897: vim: Out-of-bounds Write in vim
  * Fixing bsc#1200011 VUL-0: CVE-2022-1898: vim: Use After Free in vim prior
    to 8.2
  * Fixing bsc#1200012 VUL-0: CVE-2022-1927: vim: Buffer Over-read in vim prior
    to 8.2
  * Fixing bsc#1070955 VUL-1: CVE-2017-17087: vim: Sets the group ownership of a
    .swp file to the editor's primary group, which allows local users to obtain
    sensitive information
  * Fixing bsc#1194388 VUL-1: CVE-2022-0128: vim: vim is vulnerable to
    Out-of-bounds Read
  * Fixing bsc#1195332 VUL-1: CVE-2022-0392: vim: Heap-based Buffer Overflow
    in vim prior to 8.2
  * Fixing bsc#1196361 VUL-1: CVE-2022-0696: vim: NULL Pointer Dereference in
    vim prior to 8.2
  * Fixing bsc#1198748 VUL-1: CVE-2022-1420: vim: Out-of-range Pointer Offset
  * Fixing bsc#1199651 VUL-1: CVE-2022-1735: vim: heap buffer overflow
  * Fixing bsc#1199655 VUL-1: CVE-2022-1733: vim: Heap-based Buffer Overflow in
    cindent.c
  * Fixing bsc#1199693 VUL-1: CVE-2022-1771: vim: stack exhaustion in vim prior
    to 8.2.
  * Fixing bsc#1199745 VUL-1: CVE-2022-1785: vim: Out-of-bounds Write
  * Fixing bsc#1199936 VUL-1: CVE-2022-1851: vim: out of bounds read</changelog>
  <changelog author="zbalogh@suse.com" date="1661947200">- Updated to version 9.0 with patch level 0313, fixes the following problems
  * Fixing bsc#1200884 Vim: Error on startup
  * Fixing bsc#1200902 VUL-0: CVE-2022-2183: vim: Out-of-bounds Read through get_lisp_indent() Mon 13:32
  * Fixing bsc#1200903 VUL-0: CVE-2022-2182: vim: Heap-based Buffer Overflow through parse_cmd_address() Tue 08:37
  * Fixing bsc#1200904 VUL-0: CVE-2022-2175: vim: Buffer Over-read through cmdline_insert_reg() Tue 08:37
  * Fixing bsc#1201249 VUL-0: CVE-2022-2304: vim: stack buffer overflow in spell_dump_compl()
  * Fixing bsc#1201356 VUL-1: CVE-2022-2343: vim: Heap-based Buffer Overflow in GitHub repository vim prior to 9.0.0044
  * Fixing bsc#1201359 VUL-1: CVE-2022-2344: vim: Another Heap-based Buffer Overflow vim prior to 9.0.0045
  * Fixing bsc#1201363 VUL-1: CVE-2022-2345: vim: Use After Free in GitHub repository vim prior to 9.0.0046.
  * Fixing bsc#1201620 PUBLIC SUSE Linux Enterprise Server 15 SP4 Basesystem zbalogh@suse.com NEW --- SLE-15-SP4-Full-x86_64-GM-Media1 and vim-plugin-tlib-1.27-bp154.2.18.noarch issue
  * Fixing bsc#1202414 VUL-1: CVE-2022-2819: vim: Heap-based Buffer Overflow in compile_lock_unlock()
  * Fixing bsc#1202552 VUL-1: CVE-2022-2874: vim: NULL Pointer Dereference in generate_loadvar()
  * Fixing bsc#1200270 VUL-1: CVE-2022-1968: vim: use after free in utf_ptr2char
  * Fixing bsc#1200697 VUL-1: CVE-2022-2124: vim: out of bounds read in current_quote()
  * Fixing bsc#1200698 VUL-1: CVE-2022-2125: vim: out of bounds read in get_lisp_indent()
  * Fixing bsc#1200700 VUL-1: CVE-2022-2126: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1200701 VUL-1: CVE-2022-2129: vim: out of bounds write in vim_regsub_both()
  * Fixing bsc#1200732 VUL-1: CVE-2022-1720: vim: out of bounds read in grab_file_name()
  * Fixing bsc#1201132 VUL-1: CVE-2022-2264: vim: out of bounds read in inc()
  * Fixing bsc#1201133 VUL-1: CVE-2022-2284: vim: out of bounds read in utfc_ptr2len()
  * Fixing bsc#1201134 VUL-1: CVE-2022-2285: vim: negative size passed to memmove() due to integer overflow
  * Fixing bsc#1201135 VUL-1: CVE-2022-2286: vim: out of bounds read in ins_bytes()
  * Fixing bsc#1201136 VUL-1: CVE-2022-2287: vim: out of bounds read in suggest_trie_walk()
  * Fixing bsc#1201150 VUL-1: CVE-2022-2231: vim: null pointer dereference skipwhite()
  * Fixing bsc#1201151 VUL-1: CVE-2022-2210: vim: out of bounds read in ml_append_int()
  * Fixing bsc#1201152 VUL-1: CVE-2022-2208: vim: null pointer dereference in diff_check()
  * Fixing bsc#1201153 VUL-1: CVE-2022-2207: vim: out of bounds read in ins_bs()
  * Fixing bsc#1201154 VUL-1: CVE-2022-2257: vim: out of bounds read in msg_outtrans_special()
  * Fixing bsc#1201155 VUL-1: CVE-2022-2206: vim: out of bounds read in msg_outtrans_attr()
  * Fixing bsc#1201863 VUL-1: CVE-2022-2522: vim: out of bounds read via nested autocommand
  * Fixing bsc#1202046 VUL-1: CVE-2022-2571: vim: Heap-based Buffer Overflow related to ins_comp_get_next_word_or_line()
  * Fixing bsc#1202049 VUL-1: CVE-2022-2580: vim: Heap-based Buffer Overflow related to eval_string()
  * Fixing bsc#1202050 VUL-1: CVE-2022-2581: vim: Out-of-bounds Read related to cstrchr()
  * Fixing bsc#1202051 VUL-1: CVE-2022-2598: vim: Undefined Behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput()
  * Fixing bsc#1202420 VUL-1: CVE-2022-2817: vim: Use After Free in f_assert_fails()
  * Fixing bsc#1202421 VUL-1: CVE-2022-2816: vim: Out-of-bounds Read in check_vim9_unlet()
  * Fixing bsc#1202511 VUL-1: CVE-2022-2862: vim: use-after-free in compile_nested_function()
  * Fixing bsc#1202512 VUL-1: CVE-2022-2849: vim: Invalid memory access related to mb_ptr2len()
  * Fixing bsc#1202515 VUL-1: CVE-2022-2845: vim: Buffer Over-read related to display_dollar()
  * Fixing bsc#1202599 VUL-1: CVE-2022-2889: vim: use-after-free in find_var_also_in_script() in evalvars.c
  * Fixing bsc#1202687 VUL-1: CVE-2022-2923: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240
  * Fixing bsc#1202689 VUL-1: CVE-2022-2946: vim: use after free in function vim_vsnprintf_typval
  * Fixing bsc#1202862 VUL-1: CVE-2022-3016: vim: Use After Free in vim prior to 9.0.0285 Mon 12:00</changelog>
  <changelog author="zbalogh@suse.com" date="1669204800">- Updated to version 9.0 with patch level 0814, fixes the following problems
  * Fixing bsc#1192478 VUL-1: CVE-2021-3928: vim: vim is vulnerable to Stack-based Buffer Overflow
  * Fixing bsc#1203508 VUL-0: CVE-2022-3234: vim: Heap-based Buffer Overflow prior to 9.0.0483.
  * Fixing bsc#1203509 VUL-1: CVE-2022-3235: vim: Use After Free in GitHub prior to 9.0.0490.
  * Fixing bsc#1203820 VUL-0: CVE-2022-3324: vim: Stack-based Buffer Overflow in prior to 9.0.0598.
  * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c
  * Fixing bsc#1203152 VUL-1: CVE-2022-2982: vim: use after free in qf_fill_buffer()
  * Fixing bsc#1203796 VUL-1: CVE-2022-3296: vim: stack out of bounds read in ex_finally() in ex_eval.c
  * Fixing bsc#1203797 VUL-1: CVE-2022-3297: vim: use-after-free in process_next_cpt_value() at insexpand.c
  * Fixing bsc#1203110 VUL-1: CVE-2022-3099: vim: Use After Free in ex_docmd.c
  * Fixing bsc#1203194 VUL-1: CVE-2022-3134: vim: use after free in do_tag()
  * Fixing bsc#1203272 VUL-1: CVE-2022-3153: vim: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404.
  * Fixing bsc#1203799 VUL-1: CVE-2022-3278: vim: NULL pointer dereference in eval_next_non_blank() in eval.c
  * Fixing bsc#1203924 VUL-1: CVE-2022-3352: vim: vim: use after free
  * Fixing bsc#1203155 VUL-1: CVE-2022-2980: vim: null pointer dereference in do_mouse()
  * Fixing bsc#1202962 VUL-1: CVE-2022-3037: vim: Use After Free in vim prior to 9.0.0321
- ignore-flaky-test-failure.patch: Ignore failure of flaky tests
- disable-unreliable-tests-arch.patch: Removed
- for the complete list of changes see
  https://github.com/vim/vim/compare/v9.0.0313...v9.0.0814</changelog>
</package>
</otherdata>